
SOAR Engineer, SPLUNK
Posted Jul 27

Posted Jul 27
This is a fully remote position, open to applicants in United Kingdom.
• Collaborate with the incident response team to design, identify, and implement enhancement opportunities.
• Create and execute automations for detection and response.
• Serve as the subject matter expert in big data analytics and automation.
• Engage in special projects as required and perform additional assigned tasks.
• Generate System Analytics to validate automation behavior assumptions.
• Record all system modifications in accordance with Change Management best practices.
• Suggest, develop, and release new Use Cases to optimize benefits and efficiencies from a SOAR platform.
• Provide mentorship to junior members of the SOAR team.
• Conduct Quality Assurance on the work completed by other team members prior to implementation in production.
• Proficient in Splunk, Splunk Enterprise Security, Splunk SOAR (formerly Splunk Phantom), and Splunk User Behaviour Analytics.
• Create and implement automations for detection and response.
• Generate System Analytics to validate automation behavior assumptions.
• A strong enthusiasm for security automation and a solid grasp of security incident response.
• Familiarity with security frameworks such as MITRE ATT&CK, NIST, etc.
• Working knowledge of operating systems (e.g., Windows, UNIX/Linux) and databases.
• Proficiency in various scripting and programming languages (Java, Perl, R, Python, C++).
• Understanding of NIS regulations (Desirable).
• Familiarity with CNI and preferably the Energy Sector, ideally having experience in a CNI environment/client (Desirable).
• Understanding of NCSC CAF and IT/OT controls such as NIST (Desirable).
• Experience integrating SOAR (Splunk) with OT-specific IDS such as Nozomi, Claroty, Dragos, etc. (Desirable).
• Experience in playbook development (Desirable).
• Flexible Working: Achieve a balance between work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday plus bank holidays, with the option to purchase up to 5 additional days of annual leave.
• Medicash & Critical Illness Scheme.
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes: Contribute positively to your community through our volunteering opportunities.
• Green Car Scheme: Embrace eco-friendliness and save money with our green car initiative.
• Cycle Scheme: Maintain fitness and health with our cycle-to-work program.
• Special Time Off: Take time off for significant life events, such as marriage/civil partnership, becoming a grandparent, or welcoming a new pet.
• Family Planning: Benefit from our extensive maternity and paternity leave, along with support and time off for those undergoing fertility treatments.
LiteLLM AI Gateway
Snowflake
RTX
C-MORE
Get handpicked remote jobs straight to your inbox weekly.