Head of Security Automation

Responsibilities

• Automation Strategy & Leadership
• Define and own the automation vision and roadmap aligned to GCAT SOC10x principles.
• Drive adoption of advanced automation capabilities across SIEM, SOAR, EDR, TIP, and cloud-native security tools.
• Lead development and maintenance of SOAR playbooks, integrations, and automation workflows.
• Identify automation opportunities to replace manual, high-effort processes across the security lifecycle.
• Govern standards for automation coding, testing, documentation, and version control.
• Process Engineering & Operating Model
• Own the design, improvement, and standardisation of Operational Security processes and SOPs.
• Build and maintain the process architecture for SOC, IR, Threat Hunting, and Detection Engineering.
• Implement KPIs, maturity assessments, and continual service improvement cycles.
• Ensure cross-team alignment and process integration across security disciplines.
• Develop scalable, predictable, and measurable operating models for Operational Security.
• Engineering Excellence & Technical Ownership
• Oversee deep integration between Microsoft and Google security stacks, SOAR, SIEM, EDR, and TIP.
• Ensure data flow and telemetry integration support automation pipelines.
• Direct design reviews, QA, tooling optimisation, and technology evaluations.
• Implement AI/ML-driven automation for enrichment, prioritisation, and response orchestration.
• Cross-Functional Collaboration & Stakeholder Engagement
• Act as automation and process engineering authority for Operational Security and Technology teams.
• Collaborate with Detection Engineering, IR, Threat Hunting, and Threat Intelligence on automation requirements.
• Partner with Ops Assurance, Legal, Privacy, vendors, and MSSPs to ensure aligned workflows.
• Lead training programmes to uplift automation and process capability
• Talent Leadership & Organisational Development
• Build and lead a high-performing automation and process engineering team.
• Establish engineering standards for development, testing, and deployment.
• Drive continuous learning, knowledge sharing, and capability uplift.
• Strategic Alignment to GCAT SOC10x
• 10X People: Build an engineering-centric automation and process team with strong knowledge sharing.
• 10X Process: Transform security processes into automated, measurable, agile workflows.
• 10X Technology: Leverage SOAR, AI/ML, and cloud-native automation to enhance detection and response.
• 10X Visibility: Ensure comprehensive telemetry ingestion and process observability.
• 10X Speed: Reduce MTTD/MTTR by eliminating manual tasks and enabling orchestration.
• 10X TCO: Reduce cost and improve efficiency through automation and optimisation.
• 10X Influence: Shape engineering culture and operational strategy across the organisation.

Requirements

• Technical Expertise
• Deep experience with SOAR platforms and automation engineering.
• Strong engineering background with SIEM, EDR, cloud-native security tooling.
• Proficiency in Python, PowerShell, APIs, webhooks, and integration engineering.
• Experience with AI/ML-enabled security automation and enrichment
• Process & Operating Model
• Experience designing and governing operational workflows and SOPs.
• Knowledge of CSI frameworks, maturity models, and process optimisation.
• Experience with Lean, Six Sigma, or similar methodologies (desirable).
• Leade

Benefits

Additional Information

WPP is the trusted growth partner for the world's leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company - powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We have been building the world's most valuable brands for 50 years and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Head of Automation & Process Engineering is responsible for establishing and leading the enterprise-wide automation and process excellence function within Operational Security. This role builds and scales an engineering-first automation capability that supports an Autonomic Security Operations (ASO) model-driving 10X improvements across SOC workflows, SOAR pipelines, incident response processes, and operational efficiency. The role oversees Security Automation Engineering and Process Engineering disciplines, ensuring seamless integration of automation, AI/ML, workflow optimisation, structured procedures, and end-to-end process governance across the security function.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at wpp? Share your experience