Why we're hiring:

To help us scale and deliver solutions across our Data Mesh platform, we are looking for a DevOps engineer who can be responsible for the deployment of our data solutions using Azure DevOps. Automation is at the core of our solutions, which spans our development, testing and production infrastructures. A focus on balancing agility, low maintenance and security is critical.  

The ideal candidate will have a solid background in DevOps engineering for a large company and be highly experienced with Azure DevOps Pipelines to deploy both IaC and solutions. You’ll be working closely with our Software & Data Engineering teams - from the first lines of code being committed to it being deployed into production.  

The DevOps engineer will also help design & plan projects and be involved in project execution decisions.  

What you'll be doing:

• Build CI/CD process to increase release efficiency and reduce occurrence of errors. 

• Develop software to integrate with internal backend systems  

• Perform root cause analysis of deployment errors and provide future mitigation of those errors  

• Communicate to both technical and non-technical stakeholders  

• Cloud deployment and management 

• CI/CD management and deployment 

• Performance assessment, monitoring and recommending performance enhancements 

• Infrastructure management using IaC 

• Continuous testing at different stages of the development lifecycle 

• Helping to implement a DevOps culture 

What you'll need:

• At least 3 years’ experience as an Azure DevOps engineer 

• Azure infrastructure configuration and management with at least AZ-900 certification  

• Experience of designing and implementing CI/CD pipelines in Azure DevOps for web services and data products 

• Scripting in Python, Bash and Powershell 

• Experience with tools including Docker, Kubernetes 

• Experience Azure Data Services - Data Factory, Synapse, Azure Databricks 

• Experience using ARM and Terraform (Experience using Bicep an advantage)  

• Experience Azure DevOps to deploy Azure Cloud Scale Analytics (Not essential) 

• Problem-solving attitude  

• Collaborative team spirit   

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid 

Why we're hiring:

The Automation Engineer is responsible for designing, developing, and maintaining security automation solutions that enhance detection, response, workflow efficiency, and operational consistency across Operational Security. Working under the Automation Lead, this role builds high-quality SOAR playbooks, integrations, scripts, AI-assisted workflows, and orchestration pipelines to reduce manual workloads and support the Autonomic Security Operations (ASO) model.

What you'll be doing:

Core Responsibilities

Automation Engineering & Development

• Develop SOAR playbooks, workflows, and automations for alert triage, enrichment, containment, and remediation.
• Build scalable, reusable automation components, scripts, and integrations.
• Implement high-quality scripting using Python, PowerShell, and REST APIs.
• Ensure appropriate version control, QA, testing, and documentation of automation artefacts.
• Maintain reliability of automations by monitoring performance, exceptions, and system behaviour.

Platform Integration & Tooling Engineering

• Integrate SOAR with SIEM, EDR, TIP, cloud-native security tools, and case management systems.
• Engineer automation pipelines to support Microsoft and Google security ecosystems.
• Develop API integrations, webhooks, and event-driven automation triggers.
• Support data transformation, enrichment, and telemetry orchestration requirements.

AI / ML Automation Enablement

• Contribute to embedding AI/ML-driven enrichment and correlation logic into automated workflows.
• Support operationalisation of ML models for anomaly detection and decision support.
• Collaborate with data and detection teams to refine and enhance AI-enabled automation.

Workflow Engineering & Process Automation

• Translate SOPs, response runbooks, and detection workflows into automated processes.
• Identify automation opportunities to eliminate manual tasks across SecOps functions.
• Ensure automated processes remain consistent, auditable, and compliant with Operational Security standards.

Operational Collaboration & Support

• Work with Detection Engineering, Incident Response, Threat Hunting, and Threat Intelligence teams to automate use cases.
• Participate in post-incident reviews and embed improvements into automation workflows.
• Assist with tool evaluations, optimisation initiatives, and integration efforts led by the Automation Lead.

Continuous Improvement

• Contribute to a backlog of automation enhancements and new capabilities.
• Optimise accuracy, resilience, and efficiency across automation workflows.
• Ensure alignment with GCAT SOC10x principles, including 10X Technology, Process, Speed, and Visibility.

What you'll need:

Technical Expertise

• Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or Chronicle SOAR.
• Proficiency in Python and/or PowerShell for automation development.
• Strong understanding of REST APIs, JSON, and event-driven automation.
• Experience integrating SIEM, EDR, TIP, and cloud-native security tools.

Process & Operational Knowledge

• Understanding of workflows across SOC, Incident Response, Threat Hunting, and Detection Engineering.
• Ability to convert operational requirements and SOPs into engineered automation.
• Familiarity with playbooks, runbooks, and security process governance.

Collaboration & Delivery

• Strong communication and documentation skills.
• Ability to work in an engineering-led, automation-first culture.
• Experience working with cross-functional technical teams in security operations.

Certifications (Preferred)

• SOAR platform certifications.
• GIAC (GMON, GCTI, GCIH, GCDA).
• Python or scripting certifications.
• Azure or GCP cloud certifications.

Key Attributes

• Engineering-first mindset with strong attention to detail.
• Problem-solving orientation with a focus on automation and efficiency.
• Structured, methodical, and reliable approach to delivery.
• Commitment to operational excellence and continuous improvement.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid 

Why we're hiring:

The Threat Hunter is responsible for proactively identifying advanced threats that evade traditional security controls. This role involves hypothesis-driven investigations, leveraging threat intelligence, and analyzing telemetry across endpoints, networks, and cloud environments to uncover stealthy adversary activity. The Threat Hunter plays a critical role in reducing dwell time and strengthening organizational resilience under the Autonomic Security Operations model.

What you'll be doing:

Proactive Threat Hunting

· Execute hypothesis-driven hunts based on adversary TTPs and threat intelligence.

· Analyze telemetry from SIEM, EDR/XDR, NDR, and cloud-native platforms to identify anomalies.

· Develop and maintain hunting queries and scripts for automation and repeatability.

· Validate detection coverage through purple team exercises and adversary emulation.

Threat Intelligence Integration

· Incorporate emerging threat intelligence into hunting hypotheses and detection pipelines.

· Maintain awareness of global threat actor tactics, techniques, and procedures (MITRE ATT&CK).

Continuous Improvement

· Document hunt findings and feed insights into detection engineering and SOC workflows.

· Maintain a backlog of hunting hypotheses and visibility gaps for remediation.

· Contribute to automation of hunting workflows using scripting and SOAR platforms.

Strategic Alignment to GCAT SOC10x

· 10X People: Continuous learning and knowledge sharing within the team.

· 10X Process: Embed agile, hypothesis-driven hunting workflows.

· 10X Technology: Leverage AI/ML analytics for anomaly detection and hunt acceleration.

· 10X Visibility: Ensure comprehensive telemetry ingestion across hybrid environments.

· 10X Speed: Reduce dwell time and accelerate detection-to-response cycles.

What you'll need:

Technical Expertise

· Strong knowledge of threat hunting methodologies and frameworks (MITRE ATT&CK, TaHiTI).

· Proficiency in SIEM, EDR/XDR, and log aggregation tools across hybrid infrastructure.

· Scripting skills (Python, PowerShell) for automation and data analysis.

· Familiarity with threat intelligence integration and behavioral analytics.

Collaboration & Communication

· Ability to work closely with SOC, IR, and engineering teams.

· Skilled in documenting hunt outcomes and communicating findings effectively.

Certifications (Preferred)

· GIAC GCTI, GCIH, or equivalent advanced security certifications.

Key Attributes

· Automation-first mindset with focus on scalability and resilience.

· Strong analytical and problem-solving skills.

· Excellent communication and teamwork capabilities.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

About Mitsogo | Hexnode:

Mitsogo is a global organization that highly values the contributions of each employee. Our ability to attract top talent is a testament to our commitment to fostering a sense of belonging for everyone. We recognize the rapid evolution of technology and society that impacts our industry, and we prioritize equipping our employees with diverse opportunities and empowering them with a wide range of skills.

Hexnode, the Enterprise software division of Mitsogo Inc., was founded with a mission to simplify the way people work. Operating in over 100 countries, Hexnode UEM empowers organizations in diverse sectors. Fuelling the transformation to a seamless ecosystem of connected tools, Hexnode is revolutionizing the enterprise software and cybersecurity landscape.

 Job Overview: 

We are seeking a highly skilled and experienced Network Administrator (SME )with strong expertise in network infrastructure and IT operations. The ideal candidate will have in-depth hands-on experience with Cisco, Ruckus, Meraki, and Fortinet firewalls, along with a solid understanding of switching, routing, network management, compliance, and disaster recovery planning. This role demands a proactive professional capable of maintaining a secure, scalable, and reliable IT environment. 

Responsibilities: 

• Manage and support LAN/WAN infrastructure including Cisco, Meraki, Ruckus, and Fortinet-based networks. 

• Configure and maintain switches, routers, access points, and firewall policies. 

• Monitor network performance, troubleshoot latency, packet loss, or downtime issues. 

• Ensure compliance with IT security and regulatory frameworks (ISO, NIST, etc.). 

• Manage and maintain Windows/Linux servers, virtualization platforms (VMware/Hyper-V), and enterprise storage systems. 

• Maintain disaster recovery and backup strategies; regularly test DR procedures. 

• Assist in IT audits, patch management, and hardening infrastructure against cyber threats. 

• Implement and manage network monitoring tools (e.g., SolarWinds, PRTG, or similar). 

• Work collaboratively with IT teams to support application deployment, remote access, and secure connectivity. 

• Participate in IT infrastructure projects: upgrades, migrations, and new rollouts. 

• Maintain technical documentation, asset inventory, and configuration baselines. 

 Requirements: 

• 5–8 years of experience in system and network administration. 

• Strong expertise in:  

• Cisco switching/routing (CCNA/CCNP preferred) 

• Ruckus wireless controller and AP management 

• Meraki dashboard operations and configuration 

• Fortinet firewall setup, policy configuration, VPN, and security features 

• Proficient in:  

• Layer 2/3 networking, VLANs, STP, OSPF, BGP 

• DNS, DHCP, NAT, VPN (IPSec/SSL) 

• System patching, performance tuning, and event log monitoring 

• Experience with ITIL/ITSM processes is a plus. 

• Familiarity with compliance frameworks: ISO 27001, GDPR, HIPAA, etc. 

• Scripting and automation knowledge (PowerShell, Bash, or Python) is advantageous. 

• Excellent analytical and troubleshooting skills. 

• Strong documentation and communication skills. 

Why we're hiring:

Detection Engineering is responsible for designing, developing, and maintaining high-fidelity detection logic across enterprise security platforms. This role focuses on proactive threat detection, automation-first practices, and continuous improvement of detection coverage and accuracy, supporting the WPP SOC transformation into an Autonomic Security Operations model.

What you'll be doing:

• Develop, test, and maintain detection rules and logic across SIEM, EDR, NDR, and cloud-native platforms.
•  Regularly review and enhance detection logic to improve accuracy, reduce noise, and align with evolving threats.
• Work with wider WPP engineering teams to ensure high-quality, normalized telemetry for effective detection.
• Automate detection rule deployment, QA, and version control using scripting and CI/CD pipelines.

Root Cause Analysis (RCA)

• Conduct RCA on missed detections, delayed responses, and high-severity incidents.
•  Identify technical and process-level causes of detection failures or inefficiencies.
• Drive corrective actions based on RCA outcomes (e.g., rule improvements, visibility gaps).
• Continuous Security Improvement (CSI)
• Maintain a CSI backlog (detection gaps, telemetry blind spots, false positives to reduce).
•  Analyze detection performance metrics to identify trends and opportunities for improvement.
• Align detection priorities with business risk and the SOC transformation roadmap.
• Cross-Team Collaboration
• Collaborate with SOC, Incident Response, and Threat Hunting teams to operationalize detection improvements.
•  Work with Threat Intelligence teams to integrate emerging TTPs into detection logic.
• Contribute to purple team exercises by validating detection logic against simulated attack paths.

Strategic Alignment to GCAT SOC10x

• 10X People: Continuous learning and knowledge sharing within the team.
• 10X Process: Embed agile workflows and automation-first principles.
• 10X Technology: Leverage AI/ML for detection tuning and anomaly detectio.
• 10X Visibility: Ensure comprehensive telemetry ingestion and observability.
• 10X Speed: Reduce detection-to-response cycle through orchestration and automation.

What you'll need:

Technical Expertise

• Strong knowledge of SIEM, SOAR, EDR, and cloud security platforms.
• Proficiency in scripting and automation (Python, PowerShell).
• Familiarity with detection-as-code principles and CI/CD pipelines.
• Understanding of MITRE ATT&CK framework and threat-informed defense.

Collaboration & Communication

•  Ability to work closely with SOC analysts, threat hunters, and engineers.
• Skilled in documenting detection logic and RCA outcomes.

Certifications (Preferred)

• GIAC GCTI, GCFA, or equivalent advanced security certifications.

Key Attributes

• Automation-first mindset with focus on scalability and resilience.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork capabilities.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

Why we're hiring:

The Security Incident Responder is responsible for detecting, analyzing, and responding to cybersecurity incidents in real time. This role ensures rapid containment, eradication, and recovery from security breaches while maintaining compliance and minimizing business impact. The responder will work closely with SOC analysts, engineering teams, and cross-functional stakeholders to execute incident response playbooks and continuously improve organizational resilience.

What you'll be doing:

Incident Detection & Analysis

• Monitor SIEM, SOAR, and EDR platforms for alerts and anomalies.
• Investigate and analyze security incidents to determine scope, impact, and root cause.
• Perform forensic analysis and evidence collection in line with legal and compliance standards.

Incident Response Execution

• Execute containment, eradication, and recovery steps as per incident response playbooks.
• Collaborate with IT, Legal, and Risk teams during major incidents.
• Document all actions taken during incident handling for compliance and audit purposes.

Continuous Improvement

• Participate in post-incident reviews and root cause analysis (RCA).
•  Recommend improvements to detection and response processes based on lessons learned.
• Assist in updating and maintaining incident response procedures and playbooks.

Strategic Alignment to GCAT SOC10x

• 10X People: Enhance team capability through knowledge sharing and training.
• 10X Process: Embed automation-first workflows for incident response.
• 10X Technology: Utilize AI/ML-driven analytics for rapid threat identification.
• 10X Visibility: Ensure telemetry coverage across hybrid environments.
• 10X Speed: Reduce MTTD and MTTR through orchestration and automation

What you'll need:

Technical Expertise

• Strong knowledge of SIEM, SOAR, EDR, and forensic tools.
• Familiarity with incident response frameworks (NIST, ISO27035).
• Proficiency in scripting and automation (Python, PowerShell).
• Understanding of MITRE ATT&CK and threat intelligence integration.

Collaboration & Communication

• Ability to work under pressure and manage multiple incidents simultaneously.
• Skilled in documenting incident details and communicating effectively with stakeholders.

Certifications (Preferred)

• · GIAC GCIH, GCFA, or equivalent advanced security certifications.

Key Attributes

· Calm and decisive under pressure.

· Strong analytical and problem-solving skills.

· Automation-first mindset with focus on scalability and resilience.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

Why we're hiring:

The Head of Automation & Process Engineering is responsible for establishing and leading the enterprise-wide automation and process excellence function within Operational Security. This role builds and scales an engineering-first automation capability that supports an Autonomic Security Operations (ASO) model—driving 10X improvements across SOC workflows, SOAR pipelines, incident response processes, and operational efficiency. The role oversees Security Automation Engineering and Process Engineering disciplines, ensuring seamless integration of automation, AI/ML, workflow optimisation, structured procedures, and end-to-end process governance across the security function.

What you'll be doing:

Automation Strategy & Leadership

• · Define and own the automation vision and roadmap aligned to GCAT SOC10x principles.
• · Drive adoption of advanced automation capabilities across SIEM, SOAR, EDR, TIP, and cloud-native security tools.
• · Lead development and maintenance of SOAR playbooks, integrations, and automation workflows.
• · Identify automation opportunities to replace manual, high-effort processes across the security lifecycle.
• · Govern standards for automation coding, testing, documentation, and version control.

Process Engineering & Operating Model

• · Own the design, improvement, and standardisation of Operational Security processes and SOPs.
• · Build and maintain the process architecture for SOC, IR, Threat Hunting, and Detection Engineering.
• · Implement KPIs, maturity assessments, and continual service improvement cycles.
• · Ensure cross-team alignment and process integration across security disciplines.
• · Develop scalable, predictable, and measurable operating models for Operational Security.

Engineering Excellence & Technical Ownership

• · Oversee deep integration between Microsoft and Google security stacks, SOAR, SIEM, EDR, and TIP.
• · Ensure data flow and telemetry integration support automation pipelines.
• · Direct design reviews, QA, tooling optimisation, and technology evaluations.
• · Implement AI/ML-driven automation for enrichment, prioritisation, and response orchestration.

Cross-Functional Collaboration & Stakeholder Engagement

• · Act as automation and process engineering authority for Operational Security and Technology teams.
• · Collaborate with Detection Engineering, IR, Threat Hunting, and Threat Intelligence on automation requirements.
• · Partner with Ops Assurance, Legal, Privacy, vendors, and MSSPs to ensure aligned workflows.
• · Lead training programmes to uplift automation and process capability

Talent Leadership & Organisational Development

• · Build and lead a high-performing automation and process engineering team.
• · Establish engineering standards for development, testing, and deployment.
• · Drive continuous learning, knowledge sharing, and capability uplift.

Strategic Alignment to GCAT SOC10x

• · 10X People: Build an engineering-centric automation and process team with strong knowledge sharing.
• · 10X Process: Transform security processes into automated, measurable, agile workflows.
• · 10X Technology: Leverage SOAR, AI/ML, and cloud-native automation to enhance detection and response.
• · 10X Visibility: Ensure comprehensive telemetry ingestion and process observability.
• · 10X Speed: Reduce MTTD/MTTR by eliminating manual tasks and enabling orchestration.
• · 10X TCO: Reduce cost and improve efficiency through automation and optimisation.
• · 10X Influence: Shape engineering culture and operational strategy across the organisation.

What you'll need:

Technical Expertise

• · Deep experience with SOAR platforms and automation engineering.
• · Strong engineering background with SIEM, EDR, cloud-native security tooling.
• · Proficiency in Python, PowerShell, APIs, webhooks, and integration engineering.
• · Experience with AI/ML-enabled security automation and enrichment
• Process & Operating Model
• · Experience designing and governing operational workflows and SOPs.
• · Knowledge of CSI frameworks, maturity models, and process optimisation.
• · Experience with Lean, Six Sigma, or similar methodologies (desirable).

Leadership & Collaboration

• · Proven leadership of high-performing engineering teams.
• · Ability to influence stakeholders and communicate effectively.
• · Strong documentati
• documentation and organisational skills.

Certifications (Preferred)

• · GIAC (GCTI, GMON, GCIH, GCDA)
• · Python or automation certifications
• · Lean Six Sigma Green/Black Belt
• · GCP or Azure cloud certifications

Key Attributes

• · Engineering-first mindset with strong problem-solving skills.
• · Systems thinker with focus on scalability and resilience.
• · Excellent communicator able to translate technical complexity to outcomes.
• · Committed to operational excellence and continuous improvement.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?