SOAR Playbook Engineer, NCC Group
Office located in Hardman Boulevard, Manchester
Leading cyber security & managed services
Be an early applicant
Leading cyber security & managed services
1001+ employees
Be an early applicant
Office located in Hardman Boulevard, Manchester
1001+ employees
Company mission
To help keep customers safe and secure.
Role
Who you are
- Strong hands-on Splunk SOAR engineering experience
- Advanced Python development skills including REST APIs, JSON processing, testing and debugging
- Experience developing and maintaining production Splunk SOAR playbooks
- Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows
- Experience using Git and software development best practices
- Strong understanding of SOC operations and incident response
- Excellent customer-facing communication and consultancy skills
- Knowledge of Microsoft Defender, CrowdStrike and SentinelOne integrations is desirable
What the job involves
- As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms
- Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows
- In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers
- You assess customer requirements, collaborate with stakeholders across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective
- You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations
- Experience with Splunk SOAR is essential
- This role requires a broad combination of engineering, consultancy, and customer-facing skills
- A strong technical foundation, excellent communication skills, and a passion for continuous learning are essential
- We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations
- As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely and in person
- As part of a global organisation, proficiency in written and spoken English is required
- Reporting To Kai Leenders
- Design, develop, test and maintain Splunk SOAR playbooks
- Develop custom Python automations and API integrations
- Build enrichment, investigation, containment and remediation workflows
- Troubleshoot playbook, connector and integration issues
- Integrate Splunk SOAR with security, cloud and ITSM platforms
- Improve automation coverage, reduce analyst effort and lower MTTR
- Maintain documentation, code repositories and engineering standards
- Act as the Splunk SOAR SME for customers and internal teams
Application process
- Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does
Our take
NCC Group is a global cyber and software resilience businesses that assesses, develops and manages cyber threats. The company operates across multiple sectors, geographies and technologies but with the universal mission of communicating the best ways to keep businesses, software and personal data safe.
As we become more entrenched in the digital age, businesses are more vulnerable to cyber-related risk, and this is where NCC Group comes in. Its services work to make the Internet safer and to change the way that organisations think about cyber security. It continues to build momentum as our society becomes increasingly connected but more uncertain.
NCC Group's role is only set to grow too. As technology evolves and cyber threats become more sophisticated, businesses and individuals will need trusted partners to navigate the risks. NCC Group's expertise, global reach, and proactive approach puts it in a position to help organisations not only respond to threats, but to stay ahead of them.
Steph
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Company HQ
Spinningfields, Manchester, UK
Leadership
Mike Maddison
(Group CEO)Former head of EY’s cyber security, privacy, and trusted technology practice for EMEA. Previously led PwC’s Risk Services practice across the Middle East and before that was head of Deloitte’s cyber security consultancy in EMEA.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 10 more jobs at NCC Group