Security Process Engineer

Why we're hiring:

The Process Engineer is responsible for designing, engineering, maintaining, and continuously improving Operational Security processes across WPP. The role focuses on defining how Operational Security operates in practice, ensuring processes are clear, auditable, automation-enabled, and scalable. This is an individual contributor role with no people management responsibilities; management accountability sits with the Process Engineering Lead.

What you'll be doing:

• - Engineer and maintain end-to-end operational security processes across SOC operations, incident response, detection engineering, threat hunting, threat intelligence, automation, and vulnerability management.
• - Define workflows, decision points, inputs/outputs, and escalation paths for operational activities.
• - Maintain the authoritative process library describing how Operational Security services operate.

• - Ensure processes are standardised, consistent, and aligned across teams and regions.
• - Align processes to internal policy, risk, legal, and assurance requirements.
• - Act as a quality gate for new or changed processes to ensure clarity and audit readiness.

• - Partner with Security Automation Engineering to ensure processes are automation-friendly and evidence-driven.
• - Identify manual or high-effort steps and work with engineering teams to automate or eliminate them.
• - Ensure documented processes accurately reflect real system behaviour.

• - Maintain process documentation suitable for internal and external audit.
• - Support audits and reviews by explaining processes, control points, and evidence sources.
• - Ensure traceability between process definitions, tooling, and execution.

• - Review and improve processes based on operational feedback, incidents, and maturity assessments.
• - Support KPI, maturity, and continual service improvement initiatives.
• - Partner with security teams to evolve processes as capabilities mature.

What you'll need:

• - Experience designing or engineering operational processes in a security or technology environment.
• - Strong understanding of security operations domains and how they interconnect.
• - Ability to translate operational activity into clear, auditable processes.
• - Strong documentation and stakeholder communication skills.

• - Experience supporting audit or assurance activity.
• - Familiarity with automation-first or engineering-led operating models.
• - Exposure to ITIL or process maturity frameworks in practical application

• - Individual contributor role reporting to the Process Engineering Lead.
• - Works closely with Automation Engineering, Detection Engineering, IR, CTI, and VM teams.
• - Central to WPP’s Autonomic Security Operations and automation strategy

Who you are: