Security Automation Engineer - SOAR

2 days ago

Apply Now

Receive Emails with Similar Jobs

Endava

WebsiteLinkedInAll Job Openings

Endava is a technology company that partners with clients to drive meaningful change through innovative technological solutions. With over two decades of experience, Endava combines world-class engineering, industry expertise, and a people-centric mindset to transform businesses across various sectors. Specializing in areas such as finance and banking, healthcare, media, and telecommunications, Endava leverages its industry-specific knowledge to create solutions that meet the evolving needs of the market. The company is committed to building trusted partnerships and creating positive impacts for both businesses and people.

Digital Strategy • Continuous Delivery & DevOps • Digital Execution • Applications Management • UX/Creative Services

10,000+ employees

Founded 2000

🏢 Enterprise

💰 Post-IPO Debt on 2023-02

📋 Description

• Our infrastructure specialists are responsible for designing and implementing back-end services. • They ensure reliability, security, and scalability for all platform layers within our solutions. • Infrastructure teams provide expertise across virtualization, cloud services, storage solutions, cybersecurity, and scripting and automation. • Develop and implement security automation workflows using SOAR platforms such as Google Chronicle or Microsoft Sentinel SOAR. • Integrate SOAR platforms with SIEM solutions, cyber threat intelligence platforms, and other security tools. • Automate security operations tasks, including alert triage, incident response, and threat intelligence enrichment. • Optimize SOC workflows by developing custom playbooks, scripts, and connectors for seamless automation. • Monitor and fine-tune automation workflows to ensure efficiency, reliability, and minimal false positives. • Collaborate with security teams to define automation requirements and continuously improve security response capabilities. • Conduct proof-of-concept (PoC) evaluations for new integrations. • Document automation processes, workflows, and playbooks for knowledge sharing and operational continuity. • Stay up to date on the latest SOAR trends, cybersecurity threats, and best practices in security automation. • Track SOAR platform performance, report on efficiency gains, and provide insights on ROI from automation efforts.

🎯 Requirements

• 3+ years of experience in security automation, security operations, or security engineering • Hands-on experience with SOAR platforms, preferably Google Chronicle and/or Microsoft Sentinel SOAR • Strong scripting skills in Python, PowerShell, or JavaScript for automation and integration • Experience integrating SOAR with SIEMs, EDR, threat intelligence platforms, and ticketing systems (e.g., ServiceNow, Jira) • Knowledge of cyber security frameworks such as MITRE ATT&CK and NIST • Understanding of security incident handling, threat detection, and response processes in an enterprise environment • Familiarity with APIs, webhooks, and integrations for security tool interoperability • Excellent problem-solving skills and the ability to work in a fast-paced security environment • Tooling-specific certifications such as Splunk SOAR Certified Automation Developer, Google Chronicle SOAR Developer, Palo Alto Cortex XSOAR Specialist, GIAC Security Automation (GCSA), or similar relevant • Exposure to machine learning or AI-driven automation for security operations

🏖️ Benefits

• Competitive salary package • Share plan • Company performance bonuses • Value-based recognition awards • Referral bonus • Career coaching • Global career opportunities • Non-linear career paths • Internal development programmes for management and technical leadership • Complex projects • Rotations • Internal tech communities • Training • Certifications • Coaching • Online learning platforms subscriptions • Pass-it-on sessions • Workshops • Conferences • Hybrid work and flexible working hours • Employee assistance programme • Global internal wellbeing programme • Access to wellbeing apps • Global internal tech communities • Hobby clubs and interest groups • Inclusion and diversity programmes • Events and celebrations