Security Process Engineer

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: The Automation Engineer is responsible for designing, developing, and maintaining security automation solutions that enhance detection, response, workflow efficiency, and operational consistency across Operational Security. Working under the Automation Lead, this role builds high-quality SOAR playbooks, integrations, scripts, AI-assisted workflows, and orchestration pipelines to reduce manual workloads and support the Autonomic Security Operations (ASO) model. What you'll be doing: Core Responsibilities Automation Engineering & Development * Develop SOAR playbooks, workflows, and automations for alert triage, enrichment, containment, and remediation. * Build scalable, reusable automation components, scripts, and integrations. * Implement high-quality scripting using Python, PowerShell, and REST APIs. * Ensure appropriate version control, QA, testing, and documentation of automation artefacts. * Maintain reliability of automations by monitoring performance, exceptions, and system behaviour. Platform Integration & Tooling Engineering * Integrate SOAR with SIEM, EDR, TIP, cloud-native security tools, and case management systems. * Engineer automation pipelines to support Microsoft and Google security ecosystems. * Develop API integrations, webhooks, and event-driven automation triggers. * Support data transformation, enrichment, and telemetry orchestration requirements. AI / ML Automation Enablement * Contribute to embedding AI/ML-driven enrichment and correlation logic into automated workflows. * Support operationalisation of ML models for anomaly detection and decision support. * Collaborate with data and detection teams to refine and enhance AI-enabled automation. Workflow Engineering & Process Automation * Translate SOPs, response runbooks, and detection workflows into automated processes. * Identify automation opportunities to eliminate manual tasks across SecOps functions. * Ensure automated processes remain consistent, auditable, and compliant with Operational Security standards. Operational Collaboration & Support * Work with Detection Engineering, Incident Response, Threat Hunting, and Threat Intelligence teams to automate use cases. * Participate in post-incident reviews and embed improvements into automation workflows. * Assist with tool evaluations, optimisation initiatives, and integration efforts led by the Automation Lead. Continuous Improvement * Contribute to a backlog of automation enhancements and new capabilities. * Optimise accuracy, resilience, and efficiency across automation workflows. * Ensure alignment with GCAT SOC10x principles, including 10X Technology, Process, Speed, and Visibility. What you'll need: Technical Expertise * Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or Chronicle SOAR. * Proficiency in Python and/or PowerShell for automation development. * Strong understanding of REST APIs, JSON, and event-driven automation. * Experience integrating SIEM, EDR, TIP, and cloud-native security tools. Process & Operational Knowledge * Understanding of workflows across SOC, Incident Response, Threat Hunting, and Detection Engineering. * Ability to convert operational requirements and SOPs into engineered automation. * Familiarity with playbooks, runbooks, and security process governance. Collaboration & Delivery * Strong communication and documentation skills. * Ability to work in an engineering-led, automation-first culture. * Experience working with cross-functional technical teams in security operations. Certifications (Preferred) * SOAR platform certifications. * GIAC (GMON, GCTI, GCIH, GCDA). * Python or scripting certifications. * Azure or GCP cloud certifications. Key Attributes * Engineering-first mindset with strong attention to detail. * Problem-solving orientation with a focus on automation and efficiency. * Structured, methodical, and reliable approach to delivery. * Commitment to operational excellence and continuous improvement. Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day. What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?   We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: WPP is a creative transformation company, helping clients create growth by combining technology and creativity. As one of the world's largest marketing and advertising services organizations, we are committed to driving innovation and operational excellence across our vast global network. You will be joining the Automation Operations Centre within WPP's Enterprise Technology, Automation & AI department. This is a pivotal time for us as we're building a dedicated, in-house team to deliver, manage, monitor, and optimize our growing portfolio of automation solutions. This team is at the forefront of our digital transformation, ensuring the seamless operation and continuous improvement of critical automation capabilities across WPP globally You will play a crucial role in solution delivery and day-to-day technology management of the Global Automation Operations Centre (AOC) program. Reporting to the AAI Operations Director and AAI Product Lead, you will lead the architecture, standards, and advanced development requirements for our global automation portfolio. Alongside AAI Leadership, you will guide a crew of 6-10 developers to ensure the release of high-quality automation products on time and within budget. The AOC is chartered to develop and delivery automation products, support global automation products or projects delivered by Automation delivery teams from around WPP. Our support apparatus gives those teams confidence and freedom to hand over their existing successes and continue innovating. Are you a visionary technical leader with a deep mastery of the Microsoft Power Platform and a passion for engineering excellence? We are looking for an Automation Engineering Lead to drive our technical strategy and architectural standards. In this senior role, you will be responsible for conducting research spikes, providing technical guidance to development teams, and ensuring that our global automation suite is built on a foundation of robust, scalable, and maintainable components. You will combine your extensive experience from the D365/Dataverse era with modern ALM practices to keep our global operations at the cutting edge of AI and automation. What you'll be doing: Automation Engineering Lead (Engineering Excellence + AI-Driven Automation)  We are looking for an experienced Automation Engineering Lead who combines a complete view across multiple engineering technology streams with a strong background in automation and AI-driven engineering practices across modern technology stacks.  This is not a single-stack or platform-specific role.  You will act as an enterprise engineering leader, responsible for designing scalable, high-performance solutions by evaluating the right engineering approach across diverse technology streams spanning APIs, backend services, modern frontends, cloud platforms, deployment architecture, and AI/ML capabilities.  You will play a critical role in shaping engineering strategy, establishing end-to-end engineering processes, guiding engineering teams, and ensuring solutions are fit-for-purpose, scalable, and future-ready.   What You’ll Be Doing  Solution Architecture & Technology Decisioning  * Own end-to-end architecture for automation use cases across the enterprise   * Evaluate and recommend the right approach across:   * Cloud-native engineering (microservices, serverless, container platforms)   * Custom engineering (APIs, backend services, UI frameworks)   * AI-augmented automation combining ML services, LLMs, and intelligent workflows   * Make informed trade-offs between build vs buy, custom vs platform, and AI-driven vs deterministic approaches based on scalability, cost, and maintainability   * Act as a key decision-maker on the right technology stream and tooling for each engineering problem   * Knowledge in Power Platform (Power Apps, Power Automate, Dataverse)   Architectural Governance  * Define and enforce global architecture standards, design patterns, and best practices   * Establish reusable engineering frameworks and AI-driven automation accelerators across teams   * Ensure consistency, scalability, and maintainability across implementations    Technical Leadership  * Lead and mentor a team of 6–10 engineers   * Provide hands-on guidance, solution reviews, and architectural oversight   * Drive engineering excellence and a culture of continuous improvement    Advanced & Hybrid Development  * Lead complex implementations involving:   * Custom connectors and API integrations   * AI/ML model integration and intelligent automation patterns   * Backend services (.NET / Java / Node.js / Python) where required   * Handle research spikes and evaluate new tools, frameworks, and capabilities    Integration & Data Architecture  * Design robust integration solutions using:   * REST APIs, webhooks, and service-based architectures   * Event-driven and asynchronous processing patterns   * Work with structured and unstructured data across:   * Cloud data platforms (Azure Data Lake, BigQuery, Snowflake, etc.)   * SQL / external data systems   * Dataverse  * Optimize performance, scalability, and reliability of automation workflows    ALM & DevOps Strategy  * Own and mature end-to-end engineering processes including ALM, code quality, and release governance across the organization   * Implement CI/CD pipelines, deployment automation, and infrastructure-as-code using Azure DevOps, GitHub Actions, Jenkins, or similar   * Drive adoption of code-first, version-controlled, and AI-assisted development practices    Stakeholder Collaboration  * Partner with business and leadership teams to translate requirements into scalable technical solutions   * Align architecture decisions with business goals, timelines, and budgets   * Communicate complex technical concepts to both technical and non-technical stakeholders    Security, Compliance & Supportability  * Ensure solutions comply with enterprise security, governance, and data protection policies   * Design solutions for operational readiness, observability, and smooth handover to support teams    What You’ll Need  Experience  * 12+ years in software engineering, solution architecture, or enterprise application development   * Proven track record leading engineering teams across multiple technology streams with a strong background in automation and AI-driven engineering   * Knowledge in Power platform or Dynamics 365 ecosystem   Engineering Process & AI-Automation Expertise  * Deep expertise in:   * End-to-end engineering processes (SDLC, code reviews, quality gates, release management) implemented at organizational scale   * Deployment and technical architecture across cloud and hybrid environments   * Automation engineering (CI/CD, infrastructure-as-code, test automation, workflow automation)   * Experience with:   * Engineering AI workstreams (LLMs, agentic systems, intelligent automation)   * Applying AI in automation (code generation, automated testing, intelligent code review, copilots)   * Ability to drive engineering excellence and modernize platforms using AI-augmented approaches    Architecture & Engineering Breadth (Critical)  * Strong experience with API design and REST-based integrations   * Solid understanding of SQL, data modeling, and performance optimization   * Hands-on experience with at least one backend technology (.NET / Java / Node.js / Python)   * Exposure to modern frontend frameworks (React or similar)   * Understanding of:   * Microservices and distributed systems   * Event-driven architecture (queues, messaging, pub/sub)   * Proven ability to design and deliver solutions across diverse engineering streams with the right deployment and architecture choices    DevOps & ALM  * Experience with CI/CD pipelines and automated deployments   * Familiarity with Azure DevOps, GitHub Actions, or similar tools   * Strong understanding of environment strategy, solution segmentation, and release management    Leadership & Problem Solving  * Proven ability to lead and mentor engineering teams   * Strong architectural thinking and decision-making skills   * Ability to solve complex, ambiguous technical challenges   * Excellent communication and stakeholder management skills    Nice to Have  * Experience with Azure services (Functions, Logic Apps, Service Bus, API Management)   * Knowledge of enterprise integration patterns and iPaaS platforms   * Hands-on experience embedding LLMs, agents, or copilots into automation and engineering workflows    Certifications  * Certifications in AI/ML, DevOps, or enterprise architecture (TOGAF, SAFe, or equivalent), PL-600: Microsoft Power Platform Solution Architect (preferred)   Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day. What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge? We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.

WPP

WPP is the trusted growth partner for the world’s leading brands.  We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.    We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.   Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.    For more information, visit WPP.com.   Why we're hiring: Detection Engineering is responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. This role focuses on proactive threat detection, automation-first practices, and continuous improvement of detection coverage and accuracy, supporting the WPP SOC transformation into an Autonomic Security Operations model. What you'll be doing: * Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms. *  Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats. * Work with wider WPP engineering teams to ensure high-quality, normalized telemetry for effective detection. * Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines. Root Cause Analysis (RCA) * Conduct RCA on missed detections, delayed responses, and high-severity incidents. *  Identify technical and process-level causes of detection failures or inefficiencies. * Drive corrective actions based on RCA outcomes (e.g., rule improvements, visibility gaps). * Continuous Security Improvement (CSI) * Maintain a CSI backlog (detection gaps, telemetry blind spots, false positives to reduce). *  Analyze detection performance metrics to identify trends and opportunities for improvement. * Align detection priorities with business risk and the SOC transformation roadmap. * Cross-Team Collaboration * Collaborate with SOC, Incident Response, and Threat Hunting teams to operationalize detection improvements. *  Work with Threat Intelligence teams to integrate emerging TTPs into detection logic. * Contribute to purple team exercises by validating detection logic against simulated attack paths. Strategic Alignment to GCAT SOC10x * 10X People: Continuous learning and knowledge sharing within the team. * 10X Process: Embed agile workflows and automation-first principles. * 10X Technology: Leverage AI/ML for detection tuning and anomaly detectio. * 10X Visibility: Ensure comprehensive telemetry ingestion and observability. * 10X Speed: Reduce detection-to-response cycle through orchestration and automation.   What you'll need:   Technical Expertise * Strong knowledge of SIEM, SOAR, EDR, and cloud security platforms. * Proficiency in scripting and automation (Python, PowerShell). * Familiarity with detection-as-code principles and CI/CD pipelines. * Understanding of MITRE ATT&CK framework and threat-informed defense. Collaboration & Communication *  Ability to work closely with SOC analysts, threat hunters, and engineers. * Skilled in documenting detection logic and RCA outcomes. Certifications (Preferred) * GIAC GCTI, GCFA, or equivalent advanced security certifications. Key Attributes * Automation-first mindset with focus on scalability and resilience. * Strong analytical and problem-solving skills. * Excellent communication and teamwork capabilities.   Who you are: You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working. You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected. You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.   What we'll give you: Passionate, inspired people – We aim to create a culture in which people can do extraordinary work. Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry. Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?   We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. PLEASE READ OUR PRIVACY NOTICE (HTTPS://WWW.WPP.COM/EN/CAREERS/WPP-PRIVACY-POLICY-FOR-RECRUITMENT) FOR MORE INFORMATION ON HOW WE PROCESS THE INFORMATION YOU PROVIDE.