ZKM Consulting
Security Automation Engineer (SOAR)
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Automation Engineer (SOAR)
Type: Full Time / Contract / Inside IR35
Duration: 6 months initial
Start Date: ASAP
Location: Remote / On-Site Occasionally
SC Clearance is mandatory
Overview
We are seeking an innovative and highly experienced Senior SOAR Engineers to join our client's Security Orchestration, Automation, and Response (SOAR) Engineering team. In this role, you will serve as a primary technical resource responsible for developing automation and response workflows to detect, resolve, and mitigate cyber security threats. Supporting a Critical National Infrastructure (CNI) project, you will combine advanced big data analytics with automation scripting to protect vital national services from cyber disruption.
Responsibilities
- Automation & Response Development: Partner directly with the Incident Response team to design, build, and deploy automated playbooks and workflows within Splunk SOAR to maximize operational efficiency.
- Platform Subject Matter Expertise: Act as a technical SME for big data analytics, automated detection, and response strategy across Splunk Enterprise Security and Splunk SOAR platforms.
- Analytics & Quality Assurance: Produce robust system analytics to validate automation behaviours and assumptions. Lead quality assurance reviews on code and workflows built by other team members prior to production release.
- Mentoring & Leadership: Provide technical guidance and mentorship to junior members of the SOAR engineering team to uplift overall technical capability.
- Governance & Change Control: Recommend, develop, and release new automated security use cases while ensuring all system changes are strictly documented in line with industry-standard Change Management frameworks.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Strong background in cyber security automation with a deep understanding of security incident response methodologies.
- Core hands-on engineering experience using Splunk, Splunk Enterprise Security (ES), and Splunk SOAR (formerly Phantom).
- Solid experience working with multi-petabyte data lakes and large-scale SIEM environments.
- Practical knowledge of security frameworks including MITRE ATT&CK, NIST, and their application within automated playbooks.
- Strong programming and scripting capabilities (Python preferred; experience with Java, Perl, R, or C++ is a plus).
- A holistic understanding of the full technology stack, including networks, operating systems (Windows/Linux), applications, databases, and endpoints.
- Detail-oriented with excellent interpersonal and communication skills, comfortable working independently to tight deadlines in a fast-paced environment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills