At a Glance
- Tasks: Design and maintain SOAR playbooks to automate security workflows in critical environments.
- Company: Leading cyber security firm focused on protecting national infrastructure.
- Benefits: 18-month contract with potential for extension, inclusive culture, and support for diverse backgrounds.
- Other info: Opportunity to work in a dynamic team with a focus on safety and innovation.
- Why this job: Join a high-stakes role that makes a real difference in national security.
- Qualifications: Active SC clearance and experience in CNI or OT environments required.
A leading cyber security firm is looking for a SOAR/SIEM Security Engineer to join a critical national infrastructure (CNI) client on an 18-month fixed-term contract, supporting the protection of operational technology (OT) environments that underpin essential national services.
This is a high-visibility role within a security operations function tasked with detecting, responding to, and automating defence against threats across converged IT/OT infrastructure. You will be working on live, high-stakes environments.
What you will be doing:
- Designing, building, and maintaining SOAR playbooks to automate detection and response workflows
- Developing and tuning Splunk use cases, dashboards, and correlation searches across IT and OT data sources
- Supporting incident detection and response within CNI/OT environments, working closely with engineering and safety teams
- Contributing to the maturity of security monitoring across converged industrial and enterprise networks
- Working within a team that understands the unique constraints of OT - availability, safety, and legacy systems - versus traditional IT security
What you will need:
- Active SC clearance
- Proven experience working within CNI or OT environments
- Strong hands-on experience with SOAR platforms and Splunk
- A solid grasp of the differences between securing OT and IT - this isn’t a generic SOC role
- Comfortable operating in a live, high-consequence environment where good judgement matters as much as technical skill
The contract:
- 18-month FTC
- Strong potential for extension or conversion to a permanent role further down the line (not guaranteed, but a realistic prospect based on programme trajectory)
Reasonable Adjustments:
Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.
SOAR Engineer in Cheltenham employer: Sanderson Government & Defence
As a PAM Consultant with our esteemed consulting client, you will thrive in a dynamic work culture that prioritises innovation and collaboration. The company offers robust employee growth opportunities, including continuous training in cutting-edge security practices, while fostering a diverse and inclusive environment that values every individual's contribution. Located in the UK, this role not only provides competitive benefits but also the chance to make a meaningful impact on clients' security postures through your expertise in Privileged Access Management.
Contact Details:
Sanderson Government & Defence Recruitment Team
