SPLUNK SOAR Engineer - FTC 12m £110k UK REMOTE - #2112182

An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team responsible for designing, developing and optimising security automation across a large-scale enterprise environment.

This is a hands-on engineering position focused on delivering scalable Security Orchestration, Automation and Response (SOAR) capabilities using the Splunk Security platform. Working alongside Incident Response and Threat Management teams, you will develop advanced automation, improve detection and response processes, and build new use cases that strengthen cyber resilience.

This is a 12-month fixed term contract with a strong likelihood of renewal, offering a salary of up to £110,000, an excellent benefits package and fully expensed travel and accommodation for occasional business travel (typically 2-3 days per month).

You must be eligible for SC clearance. 5 years or more in the UK, with full right to work.

• Design, develop and maintain SOAR automation and response playbooks using Splunk SOAR (Phantom)
• Partner with Incident Response teams to identify opportunities for automation and operational improvement
• Build and enhance security detection and response use cases
• Develop advanced analytics to validate automation performance and effectiveness
• Configure and optimise Splunk Enterprise Security and User Behaviour Analytics (UBA)
• Produce technical documentation and ensure all changes comply with Change Management standards
• Perform technical quality assurance on automation delivered by the engineering team
• Mentor and support junior SOAR Engineers
• Contribute to continuous improvement initiatives across Cyber Security Engineering

We're keen to see proven experience delivering enterprise-scale security automation, together with strong technical expertise across the Splunk security ecosystem.

Top skills include:

• Extensive hands-on experience with Splunk Enterprise
• Strong experience with Splunk Enterprise Security (ES)
• Proven expertise in Splunk SOAR (formerly Phantom)
• Experience with Splunk User Behaviour Analytics (UBA)
• Creating analytics to validate automation behaviour
• Developing and enhancing security automation use cases
• Strong scripting experience in Python or Java, Perl, R or C++
• Deep understanding of security incident response processes
• Knowledge of security frameworks including MITRE ATT&CK and NIST
• Strong knowledge of Windows, Linux/UNIX and database technologies

• Salary up to £110,000
• Excellent benefits package
• 12-month Fixed Term Contract
• Strong likelihood of contract renewal
• Fully expensed travel and accommodation when required
• Opportunity to work on large-scale enterprise cyber security automation
• Collaborative engineering environment with access to cutting-edge Splunk technologies
• Significant autonomy and technical ownership

If you are an experienced Senior SOAR Engineer, Splunk Engineer, Security Automation Engineer, Cyber Security Engineer or Security Operations Engineer with strong expertise across the Splunk platform, we would be keen to hear from you.

Keywords: Senior SOAR Engineer, Splunk SOAR, Splunk Phantom, Splunk Enterprise Security, Splunk ES, Splunk UBA, Cyber Security Engineer, Security Automation Engineer, SOAR Engineer, Python, Security Operations, SIEM, MITRE ATT&CK, NIST, Incident Response, Splunk Developer, Cyber Security Jobs, Security Engineering, Enterprise Security.

Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.