Senior Security Automation & SOAR Engineer

Company: S&P Global
Apply for the Senior Security Automation & SOAR Engineer
Location: London
Job Description:

Overview

In this role, you will architect and deploy automated security workflows to streamline incident triage, containment, and remediation within a collaborative Cyber Fusion Center. You will integrate diverse security and IT platforms, deploy cloud security infrastructure via IaC, and advance AI-enabled decision support. You’ll work closely with SOC, Detection Engineering, and Incident Response teams to turn operational needs into scalable solutions, delivering measurable automation ROI. This position offers hands-on building, rapid learning from real use cases, and opportunities to mature security automation across the program.

Pay / Benefits

  • Health & Wellness benefits
  • Flexible downtime
  • Continuous learning resources
  • Opportunity for retirement planning and student loan contributions
  • Family-friendly perks
  • Career development and other perks

Responsibilities

  • Design and implement SOAR playbooks and automated workflows to improve SOC efficiency and reduce mean time to respond
  • Develop secure integrations across security, IT, and business platforms using APIs and code
  • Lead cross-functional collaboration to identify automation opportunities and translate needs into technical solutions
  • Deploy cloud infrastructure using IaC with RBAC and disaster recovery support
  • Incorporate Agentic AI and Large Language Models into security workflows
  • Produce executive-level reporting on automation performance and ROI to inform leadership and strategy

Key requirements

  • 5+ years designing and implementing security automation in enterprise environments
  • Hands-on incident response experience with scalable automated workflows
  • Proficiency in Python and experience with YARA, REST API development, and third-party integrations
  • Deep expertise in SIEM (Splunk, Elastic, Sentinel) and SOAR platforms (Phantom, XSOAR, Swimlane), and EDR (CrowdStrike, SentinelOne, Microsoft Defender)
  • Cloud infrastructure deployment experience in AWS with IaC tools (Terraform, CloudFormation, Pulumi)
  • Data manipulation/analysis skills (Pandas, SQL, Elasticsearch)
  • Strong presentation and communication skills
  • Cross-functional collaboration
  • Strategic thinking and ROI focus
  • Python
  • YARA
  • REST APIs

…

Posted: September 21st, 2026