About Ekco
Founded in 2016, Ekco has quickly become one of Europe’s fastest-growing cloud solution providers and your trusted security-first Managed Service Provider.
IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk – powered by local expertise, delivered at European scale.
We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments.
️ In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world.
Today, we’re a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia—and we’re continuing to grow.
At Ekco, How We Work Matters As Much As What We Deliver. Our People Live By Four Core Values That Shape Everything We Do
- On It: We take ownership, follow through, and get things done.
- All In : We collaborate, support each other, and commit fully to shared goals.
- Connected: We build trusted relationships with colleagues, clients, and partners.
- Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.
If these values resonate with you, you’ll feel right at home here.
The Role
Day-to-day At Ekco
We are looking for an Automation Engineer to design, build and maintain security automation workflows that reduce manual effort across our SOC, engineering and customer operations. You will create reliable and reusable solutions using Tines, while introducing AI capabilities into workflows in a practical, secure and controlled way.
You will own automation projects from initial requirements through to production, working closely with internal teams and customers, including organisations operating in highly regulated environments. This is an opportunity to improve the quality and scalability of our automation capability while directly influencing how security services are delivered
What You’ll Be Responsible For
- Building and improving Tines stories for alert triage, enrichment, response actions, reporting and internal operations
- Integrating Tines with security and business platforms via REST APIs, webhooks, app registrations and message queues.
- Working with Microsoft Sentinel, Defender XDR, CrowdStrike and QRadar data to automate detection-to-response workflows
- Adding AI steps to workflows, such as LLM summaries of alerts and reports, anomaly flagging and recommended actions, with a human kept in the loop
- Automating customer onboarding and platform health checks with the Engineering Ops team
- Following our story QA process: peer review, test cases, change requests and controlled promotion to production
- Gathering requirements from the SOC team, customers and project stakeholders, and turning them into clear designs
- Writing documentation and runbooks for story builds
- Monitoring automation for failures and broken data flows, and fixing issues quickly
- Contributing ideas to the automation roadmap and sharing knowledge with the team
Requirements
- Hands-on experience building workflows in a SOAR or automation platform, ideally Tines
- Strong understanding of REST APIs, JSON, authentication methods (OAuth, API keys, app registrations) and webhooks
- Scripting experience in Python, PowerShell or JavaScript
- Familiarity with KQL and familiarity with Azure services (Logic Apps, Data Lake, Entra ID)
- Experience with Azure Data Lake, Grafana or similar reporting tools
- Working knowledge of security operations: alerts, incidents, triage and common response actions
- Experience with at least one of Microsoft Sentinel, Defender XDR, CrowdStrike Falcon or QRadar
- Practical interest in AI and LLMs, and an understanding of their limits (accuracy, data handling, prompt injection)
- A structured approach to testing, version control and change management
- Clear written and verbal communication, with the ability to explain technical work to non-technical people
- Ability to own work end to end and manage several deliverables at once
Nice to Have's
- Tines certification or a portfolio of Tines stories
- Experience working with LLM APIs (for example Claude, Azure OpenAI or Microsoft Foundry) and designing prompts for reliable output
- Experience in an MSSP or multi-tenant environment
- Automation-focused certifications such as GIAC GCSA (Cloud Security Automation), Microsoft AZ-204 (Azure Developer) or AI-102 (Azure AI Engineer)
- Experience building internal tools or web apps
Benefits / Perks
- ️ Time Off: 25 days annual leave + public holidays
- Birthday Leave: One extra day off to celebrate
- Company Pension Scheme
- Employee Assistance Programme (EAP) for wellbeing support
- ️ EkcOlympics: Global team activity challenges
- Unlimited access to Pluralsight for continuous development
- Real opportunities to grow, including international progression
Why Ekco
- Company of the year 2026 Tech Excellence Awards
- ️ Microsoft 2023 Rising Star Security Partner of the Year
- First Irish Microsoft MSP to achieve all four Microsoft Security Specialisations
- A culture rooted in diversity, equity, inclusion, and belonging
- Strong commitment to internal mobility and career progression
- Flexible, family‑friendly working at the heart of our culture
- A trusted, security‑first MSP helping organisations scale smarter and stay ahead of risk