SOAR Playbook Engineer Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR Manchester Hardman Boulevard Reporting To: Kai Leenders Description As an MXDR SOAR Engineer, you design, develop, maintain and optimise security automation solutions using Splunk SOAR and similar automation platforms. Your primary focus is playbook engineering, Python development, API integrations, and automated incident response workflows. In addition to automation engineering, you are responsible for deploying, maintaining and continuously improving MXDR solutions for our customers. You assess customer requirements, collaborate with stakeholders across technical and business functions, and help ensure their environments remain secure, resilient, and operationally effective. You act as the technical authority for Splunk SOAR, supporting customers and internal teams by translating operational requirements into scalable automations. Experience with Splunk SOAR is essential. This role requires a broad combination of engineering, consultancy, and customer-facing skills. A strong technical foundation, excellent communication skills, and a passion for continuous learning are essential. We are looking for someone with experience across MXDR technologies, as well as a solid understanding of security monitoring, detection engineering, incident response, and platform integrations. As a customer-facing professional, you should be confident engaging with stakeholders at all organisational levels, both remotely and in person. As part of a global organisation, proficiency in written and spoken English is required Key Responsibilities Design, develop, test and maintain Splunk SOAR playbooks. Develop custom Python automations and API integrations. Build enrichment, investigation, containment and remediation workflows. Troubleshoot playbook, connector and integration issues. Integrate Splunk SOAR with security, cloud and ITSM platforms. Improve automation coverage, reduce analyst effort and lower MTTR. Maintain documentation, code repositories and engineering standards. Act as the Splunk SOAR SME for customers and internal teams. Skills, Knowledge
SOAR Playbook Engineer employer: NCC Group
NCC Group is an exceptional employer that prioritises employee growth and development within the dynamic field of cybersecurity. With a strong emphasis on training, mentorship, and flexible working arrangements, employees can thrive in a supportive environment while collaborating with industry experts in vibrant office locations like London, Manchester, and Cheltenham. The company also offers generous benefits, including a substantial holiday allowance and community engagement opportunities, making it an attractive choice for ambitious individuals seeking a meaningful career path.
