This is a leading UK IT solutions and managed service provider with a deep specialism in the public sector, enabling digital transformation across government, healthcare, defence, public safety, education, housing, and the charity sector. The business works with organisations to modernise with confidence across cloud, data and AI, cyber security, and managed services.

‍

The Security Operations Centre team sits at the heart of the business's managed security services offering, and this role has been created to support its continued growth and development. The culture is genuinely inclusive, with a strong belief that diverse perspectives make for stronger teams and better outcomes for clients.

As SOC Automation Engineer, you'll take a hands-on technical role at the centre of the SOC, designing, developing, and enhancing security automation solutions that improve the effectiveness, efficiency, and scalability of security operations across a range of customer environments.

• Design, develop, and maintain security automation workflows to support SOC operations
• Create and optimise automated playbooks that improve detection, triage, enrichment, and response activities
• Build and maintain integrations with security technologies including SIEM, SOAR, EDR, threat intelligence, and cloud platforms
• Leverage APIs and external data sources to enhance security workflows and processes
• Develop reusable automation components and assets deployable across multiple customer environments
• Explore and implement AI-enhanced automation capabilities where appropriate
• Produce and maintain technical documentation, workflow diagrams, implementation guides, and operational runbooks
• Monitor the performance and reliability of automation solutions and implement continuous improvements
• Work closely with SOC analysts, incident responders, and service delivery teams to understand operational requirements and deliver solutions
• Support knowledge sharing and training activities across the SOC team
• Contribute to the development of automation standards and best practices

• Minimum 3 years' experience within a SOC, security engineering, incident response, or related environment
• Minimum 2 years' experience developing or maintaining security automations
• Strong software development or automation engineering background
• Experience with Python, JavaScript, or similar scripting and development languages
• Good understanding of REST APIs and systems integration
• Experience working with SOAR technologies such as Swimlane, Cortex XSOAR, Tines, or similar platforms
• Experience integrating enterprise security technologies into automated workflows
• Understanding of modern security technologies including SIEM, SOAR, EDR, IAM, threat intelligence, and vulnerability management
• Knowledge of cloud security and cloud-based platforms
• Awareness of AI technologies and their practical application within security operations
• Strong troubleshooting, problem-solving, and technical documentation skills
• Experience within managed security services environments is desirable
• Desirable certifications include Swimlane SCSA or SCSD, Azure/AWS/GCP cloud certifications, Kubernetes certifications, and Python, DevOps, or API development certifications
• Candidates must hold current SC clearance or be eligible and willing to obtain and maintain it

• Discounted private medical insurance
• Contributory pension scheme
• A fully paid wellbeing hour per month
• Subsidised bus travel
• Discounted local gym membership
• Life insurance cover at 4x basic salary
• Enhanced family leave packages
• A fully paid volunteering day per annum
• Employee Assistance Programme available to you and your household
• Long service rewards
• A range of social events and incentives
• Salary sacrifice EV car scheme
• A one-off payment towards your home working set up
• Share save scheme
• 25 days annual leave plus bank holidays, increasing with length of service