SOAR Engineer

Security Engineer - SOAR

As a Security Engineer, you will leverage your knowledge and expertise to play a key role in developing and implementing automated workflows that will save on human hours, improve consistency, reduce risk, and allow for faster and more effective response.

Help drive the security automation roadmap based on team feedback and through your own research, testing, and development.

Work across multiple teams with security analysts and engineers to design and develop security automations across SOAR platform and other security products and tooling.

Improve existing automations and playbooks to ensure optimal platform performance.

In this job, I am accountable for:

• Design and development of security automations and playbooks.
• Maintaining the SOAR platform to ensure availability and optimal performance.
• Improve current workflows, automations and playbook based on stakeholder feedback.
• Conduct research on potential use cases for security automations and playbooks.
• Champion the Security Orchestration, Automation, and Response capability by constant development and delivery of security automations.

Key people and teams I work within and outside of Tesco:

• Security Engineering Managers
• Security Engineers
• Security Analysts
• Technical Programme Managers

Operational skills relevant for this job:

• Self-motivated
• Flexibility, responsiveness, creativity, self-starter
• Willingness to learn
• Able to build solid working relationships with all levels of seniority
• Ability to demonstrate strong written, verbal communication and presentation skills to all levels of seniority and disciplines within the organisation.
• Demonstrable curiosity, enthusiasm, and pro-active attitude to security and personal development
• Team player and independent worker
• Ability to liaise with subject matter experts

Experience relevant for this job:

• Hands-on experience with cyber security tools and solutions (ideally SOAR platforms)
• Understanding of the MITRE ATT&CK framework (or equivalent) and emerging threat actor tactics, techniques, and procedures
• Experience working and developing using Python
• Understanding of REST APIs and demonstrate ability to develop and interact with REST API
• Experience working with public cloud
• Experience and working knowledge with operating systems – both Linux and Windows platforms

About Us:

Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.

We’re a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. Please talk to us about how this can work for you - Everyone is welcome at Tesco.