SOAR Developer Job at Vodafone (Newbury)

Soar Developer

Cyber Defence Operations (CDO) is Vodafone Group’s Cyber Defence Operations Cent...

Location

United Kingdom , Newbury

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Strong understanding of security concepts and practices
Proficiency in programming languages such as Python, JavaScript or others commonly utilised in Soar development
In-depth knowledge and extensive hands-on experience with Soar platforms such as Splunk Phantom, Siemplify, IBM Resilient or similar tools
Knowledge of advanced threat detection and response methodologies alongside tools such as SIEM and SOAR
Comprehensive understanding of cybersecurity principles including security operations, incident response and threat intelligence
Strong analytical and problem-solving skills
Excellent familiarity with standard security frameworks such as MITRE, cyber kill chain and APT campaign strategies
Proven ability to work efficiently in fast-paced work environment and manage multiple priorities simultaneously
Bachelor’s degree or higher in Cyber Security/Information Technology or related field
One or more cyber security certifications such as GCIA, GCIH, GCFA, GNFA, CEH, ECSA preferred

Job Responsibility

Work closely with security analysts and engineers to detect and address security gaps by implementing automation workflows that enhance security operations
Evaluate and enhance CSOC workflows and processes by integrating automation through SOAR tools and technologies
Deploy CSOC automation and ensure compatibility with existing detection and response tools
Create and implement custom scripts to automate current detection and response workflows
Operate and refine the CSOC playbook and workflow automations
Requirement Analysis – Collaborating with stakeholders to gather and analyse requirements for the Soar and translating them into actionable development tasks
Risk Management – Identifying potential risks and challenges in Soar development projects alongside implementing strategies to mitigate them
Vendor Management – Collaborating with external vendors or partners when necessary for tool integration, support or other aspects of SOAR development

What we offer

Discretionary yearly bonus: 10%
Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
Charity days: 5 days/year
Maternity/adoption leave: 52 weeks out of which the first 13 weeks are fully paid followed by 26 weeks of half pay and 6 months - working 4 days, getting paid 5
Paternity leave: 16 weeks fully paid
Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%
Access to: private medical, private dental, free health assessments, share save scheme
Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

Fulltime

Principal Automation Engineer

We are seeking a Principal Automation Engineer to lead and drive innovation in a...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor’s or master’s degree in computer science, cybersecurity, data science, or related engineering field
proven experience (8+ years) in cybersecurity, with at least 3+ years in automation-focused roles
deep understanding of cybersecurity frameworks and concepts, including attack vectors, threat landscapes, and defence mechanisms
strong experience with SIEM/SOAR/ and EDR/XDR platforms and tools
experience in Machine Learning (ML) and Agentic AI applied for security use-cases
experience with anomaly detection, behavioural modeling, and predictive analytics in cybersecurity contexts
experience integrating machine learning models into security operations workflows in enterprise environments
proficiency in languages such as Python, Go, SPL, YaraL, and building automation frameworks
hands-on experience with big data technologies and cloud environments (AWS, Azure, GCP)
familiarity with regulatory requirements and compliance frameworks (e.g., GDPR, NIST, ISO 27001)

Job Responsibility

Drive the SOAR development lifecycle, in support of security operations and engineering teams
develop SOAR playbooks and logic
build integrations across SIEM, SOAR, EDR, identity platforms, and cloud-native services
write, test, and maintain automation scripts and workflows
deliver API solutions for SOC and enterprise Business Units
design and implement reusable automation services, APIs, and playbooks
maintain documentation for scripts, integrations, and workflows
debug and resolve technical issues in the automation lifecycle
apply advanced analytics, Machine Learning, and AI for security automation
partner with SOC/IR leadership and IT stakeholders to gather SOAR requirements and develop solutions

What we offer

Health and wellbeing benefits
career development programs
unconditional inclusion
flexibility to manage work and personal needs

Fulltime

Staff Detection and Response Engineer

The Staff Detection and Response Engineer is a critical technical role responsib...

Location

India

Salary:

Not provided

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years in security operations with 3+ years in detection engineering, including deep expertise in creating high-fidelity rules (SIGMA, YARA-L, KQL, SPL)
Proven track record of building detection strategies across SIEM, EDR, and Cloud platforms, grounded in the MITRE ATT&CK framework
Expert knowledge of SOAR platforms (e.g., Tines, Splunk SOAR, Cortex XSOAR), architecture, and complex playbook development
Proven experience designing and implementing SOAR platform architecture from concept to production
Advanced scripting and automation development skills in Python (required) for API integrations and security tool orchestration
Strong background in threat hunting methodology, hypothesis development, and campaign execution, with experience leading or co-leading hunting programs
Proficiency with data analysis, anomaly detection, and hands-on experience with hunting tools like Jupyter Notebooks, Osquery, and Velociraptor
Deep understanding of attack techniques, lateral movement, persistence mechanisms, and post-exploitation TTPs across Windows, Linux, and macOS
Familiarity with security frameworks including MITRE ATT&CK, PICERL, NIST CSF, and Detection Maturity Models, and incident response best practices
Proven ability to lead technical initiatives, mentor team members, and communicate complex technical concepts to diverse audiences

Job Responsibility

Design, implement, and maintain advanced detection rules and correlation logic across SIEM , EDR, and Cloud platforms (AWS, GCP)
Lead detection strategy and architecture aligned with the Detection Quality frameworks
Write high-fidelity detection rules using languages like SIGMA and YARA-L
Conduct deep log source analysis, perform threat modeling, adversary emulation, and maintain MITRE ATT&CK mapping coverage
Conduct detection gap analysis to identify coverage opportunities across the kill chain
Create and maintain detection playbooks, runbooks, and comprehensive documentation
Perform detection quality assessments and continuous improvement initiatives
Develop complex automated response playbooks for multi-stage incidents spanning multiple security tools
Integrate security tools via APIs (SIEM, EDR, MDM, CASB, ITSM, threat intelligence platforms)
Create automated enrichment pipelines incorporating threat intelligence, asset context, and user behavior analytics

Senior Detection and Response Engineer

The Senior Detection and Response Engineer is a critical technical role responsi...

Location

United States

Salary:

128000.00 - 161000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years in security operations with 3+ years in detection engineering, including deep expertise in creating high-fidelity rules (SIGMA, YARA-L, KQL, SPL)
Proven track record of building detection strategies across SIEM, EDR, and Cloud platforms, grounded in the MITRE ATT&CK framework
Expert knowledge of SOAR platforms (e.g., Tines, Splunk SOAR, Cortex XSOAR), architecture, and complex playbook development
Proven experience designing and implementing SOAR platform architecture from concept to production
Advanced scripting and automation development skills in Python (required) for API integrations and security tool orchestration
Strong background in threat hunting methodology, hypothesis development, and campaign execution, with experience leading or co-leading hunting programs
Proficiency with data analysis, anomaly detection, and hands-on experience with hunting tools like Jupyter Notebooks, Osquery, and Velociraptor
Deep understanding of attack techniques, lateral movement, persistence mechanisms, and post-exploitation TTPs across Windows, Linux, and macOS
Familiarity with security frameworks including MITRE ATT&CK, PICERL, NIST CSF, and Detection Maturity Models, and incident response best practices
Proven ability to lead technical initiatives, mentor team members, and communicate complex technical concepts to diverse audiences

Job Responsibility

Design, implement, and maintain advanced detection rules and correlation logic across SIEM , EDR, and Cloud platforms (AWS, GCP)
Lead detection strategy and architecture aligned with the Detection Quality frameworks
Write high-fidelity detection rules using languages like SIGMA and YARA-L
Conduct deep log source analysis, perform threat modeling, adversary emulation, and maintain MITRE ATT&CK mapping coverage
Conduct detection gap analysis to identify coverage opportunities across the kill chain
Create and maintain detection playbooks, runbooks, and comprehensive documentation
Perform detection quality assessments and continuous improvement initiatives
Develop complex automated response playbooks for multi-stage incidents spanning multiple security tools
Integrate security tools via APIs (SIEM, EDR, MDM, CASB, ITSM, threat intelligence platforms)
Create automated enrichment pipelines incorporating threat intelligence, asset context, and user behavior analytics

What we offer

performance-based bonus
equity
a generous benefits program

Fulltime

New

Lead Security Operations Engineer

We are looking for a Lead Security Operations Engineer to design, implement, and...

Location

United States , Austin

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

5+ years’ experience as a SOAR Engineer
Deep expertise in designing, building, and maintaining automated security workflows and playbooks using a SOAR platform
The ability to analyze complex security challenges, find opportunities to automate repetitive manual tasks, and develop data-driven solutions
Excellent written and verbal communication skills
Hands-on experience with a leading SOAR platform (Palo Alto Networks Cortex XSOAR, Tines or Splunk Enterprise Security) coupled with advanced scripting skills in Python

Job Responsibility

SOAR Platform Management: Lead the design, development, and maintenance of SOAR playbooks, workflows, and integrations with other security tools
Automation and Optimization: Identify and implement automation opportunities to improve the speed and accuracy of security operations and incident response
Technical Leadership: Act as a domain expert for SOAR, providing technical guidance, mentorship, and support to the security team
Collaboration and Strategy: Partner with other security teams to ensure SOAR capabilities align with the overall security strategy
Documentation and Reporting: Create and maintain comprehensive documentation for workflows and integrations, and develop reports to measure program success
Change Management and Maintenance: Assist with SOAR tool migrations, document all system changes, and stay ahead of the latest SOAR and automation trends

What we offer

Medical (HSA & FSA), dental, vision
401(k) with company match
Employee stock purchase plan
Commuter benefits
In-house wellness program
Broad learning & development opportunities
A charitable giving platform with company match
Fitness allowance
Employee discount programs
Free games & events

Fulltime

Cybersecurity analyst

We are looking for a Cybersecurity Analyst – Blue Team Level 2 to join a special...

Location

Portugal , Lisbon

Salary:

Not provided

Inetum

Expiration Date

Until further notice

Requirements

Proven experience (+2 years) in vulnerability analysis using one or more SIEM platforms
Use Case creation and Playbook development
Strong knowledge of SOAR and automated incident response
Familiarity with ticketing and workflow tools (e.g., Remedy)
Fluent in English
Analytical mindset, attention to detail, and collaborative spirit

Job Responsibility

Investigate and handle incidents escalated by Level 1, ensuring accurate technical diagnosis
Execute containment, remediation, and follow-up actions for system, network, and security failures
Operate and optimize monitoring platforms such as SIEM and SOAR
Create and maintain Use Cases and Playbooks
Document solutions and update the knowledge base
Support continuous improvement of security processes
Work with ticketing and workflow tools (e.g., Remedy)
Collaborate with technical and functional teams in incident response

Fulltime

Lead SOAR Engineer

We are looking for a Lead Security Operations Engineer to design, implement, and...

Location

United States , Las Vegas

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

5+ years’ experience as a SOAR Engineer
Deep expertise in designing, building, and maintaining automated security workflows and playbooks using a SOAR platform
The ability to analyze complex security challenges, find opportunities to automate repetitive manual tasks, and develop data-driven solutions
Excellent written and verbal communication skills
Hands-on experience with a leading SOAR platform (Palo Alto Networks Cortex XSOAR, Tines or Splunk Enterprise Security) coupled with advanced scripting skills in Python

Job Responsibility

Lead the design, development, and maintenance of SOAR playbooks, workflows, and integrations with other security tools
Identify and implement automation opportunities to improve the speed and accuracy of security operations and incident response
Act as a domain expert for SOAR, providing technical guidance, mentorship, and support to the security team
Partner with other security teams to ensure SOAR capabilities align with the overall security strategy
Create and maintain comprehensive documentation for workflows and integrations, and develop reports to measure program success
Assist with SOAR tool migrations, document all system changes, and stay ahead of the latest SOAR and automation trends

What we offer

Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match
Fitness allowance, employee discount programs, free games & events and stocked pantries

Fulltime

Cloud Automation Test Engineer

This role involves designing and executing complex penetration tests against clo...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Must have B.E / B.Tech / M.Tech / MCA in Computer Science or Information Technology
Must have a minimum of 2 to 6 years penetration testing, with a strong focus on cloud environments
In-depth understanding of cloud technologies (AWS, Azure, GCP) and their security implications
Proficiency in advanced penetration testing tools and techniques, such as Burp, ZAP, Metasploit, Cobalt Strike, and PowerSploit
Experience with container technologies (Docker, Kubernetes) and serverless architectures
Strong scripting skills (Python, PowerShell) for automation and custom tool development
Experience with security orchestration, automation, and response (SOAR) platforms
Active security certifications such as OSCP, CSSLP or related is strongly desired
Ability to work well under minimal supervision
Requires strong interpersonal, organizational, written and verbal communication skills

Job Responsibility

Design and execute complex penetration tests against cloud-native applications, infrastructure, and data stores
Exploit vulnerabilities in cloud platforms, such as AWS, Azure, and GCP, using advanced techniques and tools
Assess the security posture of cloud-native applications, microservices, and serverless architectures
Develop and execute attack scenarios that simulate real-world threats, including supply chain attacks, privilege escalation, and lateral movement
Lead and mentor a team of experienced penetration testers, providing guidance and support on advanced techniques and tools
Assign tasks, review deliverables, and ensure project timelines are met
Develop and maintain standard operating procedures for complex penetration testing activities

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

SOAR Developer

Vodafone

Location:
United Kingdom , Newbury

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Requirements:

Additional Information:

Job Posted:
February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for SOAR Developer

Soar Developer

Principal Automation Engineer

Staff Detection and Response Engineer

Senior Detection and Response Engineer

Lead Security Operations Engineer

Cybersecurity analyst

Lead SOAR Engineer

Cloud Automation Test Engineer

SOAR Developer

Vodafone

Location:United Kingdom , Newbury

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Requirements:

Additional Information:

Job Posted:February 17, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for SOAR Developer

Soar Developer

Principal Automation Engineer

Staff Detection and Response Engineer

Senior Detection and Response Engineer

Lead Security Operations Engineer

Cybersecurity analyst

Lead SOAR Engineer

Cloud Automation Test Engineer

Location:
United Kingdom , Newbury

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
February 17, 2026