Summary: Utilizing knowledge of security operations, incident response, and detection engineering, you will be responsible for the delivery of SIEM detections and security automations. The successful candidate will be proficient in automation and orchestration tools and have experience with integrating security tools APIs and Case Management tools for data enrichment.

Key Responsibilities:

• Build security automations, logging, and SIEM detections to improve the CDO's efficiency, scalability, and incident response capabilities.
• Design, implement, and maintain automated workflows and playbooks to streamline CDO operations, including incident response, threat hunting, cyber threat intelligence, and vulnerability management.
• Collaborate with CDO analysts to identify repetitive tasks and automate them to improve operational efficiency.
• Collaborate with Threat Intelligence, Incident Response, and Attack Surface Management to build and tune robust SIEM detections for both proactive and reactive response actions.
• Continuously evaluate automation solutions for performance, reliability, and scalability, making improvements as necessary.
• Collaborate with third-party vendors and service providers to leverage automation opportunities and ensure successful integrations.
• Lead technical migration of log sources into Microsoft Sentinel SIEM.

Key Skills:

• Demonstrated ability in cybersecurity, with at least 3 years in a technical role in security operations and/or security software development.
• Solid understanding of security operations, automations standard processes, detection engineering, and SIEM management.
• Experience with cloud security tools and platforms (e.g. Azure, AWS, Google Cloud) and their integration into SOC operations.
• Vendor-specific certifications for SOAR platforms (e.g., Sentinel SOAR, Splunk SOAR, Palo Alto Cortex XSOAR).
• Experience contributing to large-scale, sprint-based, security automation and detection engineering projects.

Salary (Rate): 790

City: Cambridge

Country: England

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT