pinpoint
Engineer - Splunk
NCC Group
Manchester, GBR
Contract, Full Time
Mid
Hybrid
Discovered 2 weeks ago
SplunkSplunk SOARPythonAWSAzureSIEM
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
SplunkSplunk SOARPython
Key Skills for This Role
SplunkSplunk SOARPythonAWSAzureSIEM
Full Job Posting
Key Responsibilities
- Own the build, operation, and continuous improvement of the Splunk SOAR service.
- Design, develop, review, and maintain Splunk SOAR playbooks to support security detection, investigation, and response.
- Translate security use cases, incidents, and operational requirements into effective automated workflows.
- Test SOAR playbooks thoroughly and manage controlled deployment into production environments.
- Ensure playbooks and integrations follow security engineering best practices and governance requirements.
- Work closely with SOC analysts, security engineering teams, and stakeholders to optimise automation outcomes.
- Perform playbook tuning, troubleshooting, and enhancements to improve reliability and response times.
- Maintain clear technical documentation for playbooks, integrations, and processes.
- Support live security operations where SOAR automation is involved.
- Manage your own queue of work, prioritising tasks and communicating progress effectively.
- Engage directly with customers, providing technical guidance, support, and assurance.
Skills, Knowledge & Expertise
- Proven experience as a Splunk Engineer, Splunk SOAR Engineer, or similar security automation role.
- Strong hands‑on experience developing and managing Splunk SOAR playbooks.
- Solid understanding of Splunk platform architecture, including:
- Search heads, indexers, forwarders
- Data ingestion and performance considerations
- Strong experience using Splunk SPL (Search Processing Language).
- Experience integrating Splunk SOAR with security tools such as SIEM, IAM, EDR, firewalls, and ticketing platforms.
- Strong understanding of security engineering best practices, including incident response and automation safety.
- Good understanding of security governance, policies, and control frameworks.
- General understanding of software development practices, including:
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at NCC Group
Strategic Cyber Advisory Director - Public Sector
London, GBR
SeniorFull-time
Discovered YesterdayView →
Sales Development Representative
, USA
Discovered YesterdayFull-time
Strategic Cyber Advisory Director
, USA
Discovered YesterdayFull-time
Strategic Cyber Advisory Director
, USA
Discovered YesterdayFull-time
Strategic Cyber Advisory Director - Public Sector
London, GBR
Discovered YesterdayFull-time
Strategic Cyber Advisory Director - Industrials
London, GBR
Discovered YesterdayFull-time
Strategic Cyber Advisory Director - TMT
London, GBR
Discovered YesterdayFull-time
Strategic Cyber Advisory Director - FSI
London, GBR
Discovered YesterdayFull-time
Senior Account Executive
, USA
Discovered 2 days agoFull-time