Cyber Security - SIEM - SOAR - Automation - Glasgow Hybrid (3 days onsite) - 12 month contract
I am looking for an experienced Cyber Security specialist to join a busy Security Team for our client in central Glasgow.
You will be enhancing their threat detection and incident response capabilities by designing and maintaining SIEM content, build SOAR automations, and integrate security tools to streamline their SOC operations.
Key responsibilities:
* Develop and optimise detection rules in SIEM tools (Splunk, ArcSight, Sentinel).
* Create automated workflows in SOAR platforms to improve efficiency.
* Collaborate with analysts to speed up incident containment and remediation.
* Integrate security systems with internal and external services.
* Maintain and monitor SIEM/SOAR platforms for performance and stability.
Essential skills:
* Proven background in cyber security, including SOC or incident response roles.
* Excellent skills and experience in detection engineering or incident response.
* Ability in developing SOAR automations.
* Strong Python scripting and query language skills (SPL, EQL, SQL).
* Excellent knowledge of MITRE ATT&CK, TCP/IP, and protocols (DNS, HTTP, REST, SOAP).
* Unix/Linux proficiency.
* Flexibility to work 3 days onsite is essential
Desirable skills:
1. YARA, STIX/TAXII, str...