Position Purpose: The Senior SOAR Engineer/Developer designs, develops, and maintains security orchestration and automation solutions that improve cybersecurity operations. The role develops SOAR playbooks, Python-based automations, API integrations, and workflows that connect security technologies and automate repetitive operational and incident-response processes. The developer partners with cybersecurity teams to gather requirements, identify automation opportunities, troubleshoot complex integrations, and continuously improve existing workflows. Ideal candidates have experience with Python, JSON, REST APIs, security operations, and enterprise SOAR platforms.
Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT.
Design, develop, test, deploy, and maintain SOAR playbooks and automation workflows.
Develop integrations between the SOAR platform and security technologies using REST APIs, Python, JSON, and other integration methods.
Automate repetitive security operations and incident-response activities to reduce manual effort and improve consistency.
Develop workflows that enrich security alerts with contextual information and orchestrate actions across multiple security platforms.
Partner directly with cybersecurity teams to understand existing processes, identify automation opportunities, and translate requirements into technical solutions.
Develop custom automation and integrations when pre-built SOAR capabilities do not meet business or technical requirements.
Optimize existing playbooks, scripts, and integrations for reliability, maintainability, performance, and operational efficiency.
Troubleshoot complex automation, API, integration, and workflow issues.
Maintain technical documentation for playbooks, scripts, integrations, data mappings, and automation workflows.
Participate in peer reviews, testing, and quality-control processes before automation is promoted into production.
Follow secure development practices and organizational security standards throughout the development lifecycle.
Continuously evaluate existing automations and identify opportunities to improve or simplify security processes.
Performs other duties as assigned.
Complies with all policies and standards.
Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience.
Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.
Technical Skills:
Experience developing security automation or orchestration solutions.
Strong Python scripting and development skills.
Experience working with JSON and REST APIs.
Experience integrating applications and security technologies.
Understanding of security operations, incident response, and security alert workflows.
Experience troubleshooting API, scripting, authentication, and integration issues.
Familiarity with Git and modern software development practices.
Ability to translate manual or semi-manual processes into reliable automated workflows.
Strong analytical and problem-solving skills.
Ability to collaborate with both technical and non-technical stakeholders.
Preferred Qualifications:
Hands-on experience with enterprise SOAR platforms.
Experience with Tines.
Familiarity with SIEM, EDR, threat intelligence, vulnerability management, IAM, ticketing, and other enterprise security platforms.
Experience developing custom integrations and reusable automation components.
Familiarity with CI/CD pipelines, automated code scanning, and secure development practices.
Knowledge of common cybersecurity frameworks, security operations processes, and incident-response…