API Workflow Developer

This is a fully remote position, open to applicants in United States.

📋 Description

• The API Workflow Developer will be responsible for designing, building, testing, and maintaining automation workflows and integrations in a cybersecurity context within an enterprise Security Orchestration, Automation, and Response (SOAR) environment.

• The role includes the design, development, testing, deployment, and upkeep of SOAR playbooks, workflows, integrations, and automated response actions.

• Responsibilities entail translating manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.

• Develop REST API integrations between the SOAR platform and systems such as SIEM, EDR, ticketing, identity management, asset management, vulnerability management, threat intelligence, and GRC.

• The developer will write and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.

• Configure workflow logic, including triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.

• Troubleshoot issues related to failed workflows, API errors, authentication challenges, malformed data, integration defects, and platform performance issues.

• Collaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.

• Test workflows using representative data to ensure that automated actions yield accurate, secure, and expected outcomes.

• Maintain documentation for APIs, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.

• Utilize source control, code reviews, configuration management, and controlled release processes to manage automation content effectively.

• Monitor deployed automations, review execution logs and performance metrics, and continuously enhance reliability and efficiency.

• Provide operational support, address defects, maintain the platform, and facilitate knowledge transfer for SOAR workflows and integrations.

⛳️ Requirements

• Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent professional experience.

• Three to five years of experience in API development, workflow automation, security engineering, software development, or a similar technical role.

• Proven hands-on experience in developing SOAR playbooks and integrations using platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, Tines, Swimlane, Torq, or comparable solutions.

• Proficient in Python with experience in creating scripts for automation, data processing, API integration, and error handling.

• Strong experience with REST APIs, JSON, webhooks, OAuth 2.0, API keys, tokens, certificates, and various authentication methods.

• Working knowledge of cybersecurity operations, including incident response, alert triage, threat intelligence, vulnerability management, and case management.

• Familiarity with Git, code reviews, testing, debugging, logging, documentation, and structured software development methodologies.

• Ability to troubleshoot integrations across multiple systems and analyze logs, HTTP responses, data payloads, and workflow execution results.

• Excellent communication and collaboration skills, with the capability to translate operational requirements into dependable technical solutions.

• Clearance Requirement: Ability to obtain may be necessary.

🏝️ Benefits

• Competitive salary, paid bi-monthly.

• Exceptional medical coverage.

• True Zero covers 100% of medical premiums.

• Company-wide incentives for new business development.

• Contribution incentives for white papers, blog posts, internal webinars, and similar efforts.

• Start with 3 weeks of PTO plus 11 paid holidays annually.

• 401k program with a 100% company match on the first 4% contributed.

• Monthly reimbursement for cell phone and home internet expenses.

• Paternity and maternity leave available.

• Investment in training and certifications to expand and deepen your technical expertise.