NCC Group
SOAR Playbook Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Department: Cyber Services and Capabilities
Location: GBR Manchester Hardman Boulevard
Description
As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows.
In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers. You assess customer requirements, collaborate with stakeholders across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective.
You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential.
This role requires a broad combination of engineering, consultancy, and customer-facing skills. A strong technical foundation, excellent communication skills, and a passion for continuous learning are essential. We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations.
As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely and in person. As part of a global organisation, proficiency in written and spoken English is required.
Key Responsibilities
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Design, develop, test and maintain Splunk SOAR playbooks.
- Develop custom Python automations and API integrations.
- Build enrichment, investigation, containment and remediation workflows.
- Troubleshoot playbook, connector and integration issues.
- Integrate Splunk SOAR with security, cloud and ITSM platforms.
- Improve automation coverage, reduce analyst effort and lower MTTR.
- Maintain documentation, code repositories and engineering standards.
- Act as the Splunk SOAR SME for customers and internal teams.
Skills, Knowledge & Expertise
- Strong hands-on Splunk SOAR engineering experience.
- Advanced Python development skills including REST APIs, JSON processing, testing and debugging.
- Experience developing and maintaining production Splunk SOAR playbooks.
- Experience with SIEM tools such as Splunk Enterprise Security and notable event workflows.
- Experience using Git and software development best practices.
- Strong understanding of SOC operations and incident response.
- Excellent customer-facing communication and consultancy skills.
- Knowledge of Microsoft Defender, CrowdStrike and SentinelOne integrations is desirable.
Job Benefits
- Flexible Working: Balance your work and personal life with our flexible working options.
- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
- Medicash & Critical Illness Scheme
- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
- Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
- Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
- Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.
If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: global.ta@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Notice.
We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills