Applications Security Engineer II – SOAR

This is a fully remote position, open to applicants in Missouri.

📋 Description

• Design, develop, test, implement, and sustain SOAR playbooks and automation workflows.

• Create integrations between the SOAR platform and security technologies utilizing REST APIs, Python, JSON, and other integration techniques.

• Automate repetitive security operations and incident response tasks.

• Create workflows that enhance security alerts with contextual data and orchestrate actions across various security platforms.

• Collaborate with cybersecurity teams to gather requirements and pinpoint automation opportunities.

• Convert requirements into technical solutions.

• Build custom automation and integrations when existing SOAR capabilities fall short of requirements.

• Enhance existing playbooks, scripts, and integrations for reliability, maintainability, performance, and operational efficiency.

• Diagnose complex automation, API, integration, and workflow issues.

• Maintain technical documentation for playbooks, scripts, integrations, data mappings, and automation workflows.

• Engage in peer reviews, testing, and quality-control processes prior to production deployment.

• Adhere to secure development practices and organizational security protocols.

• Continuously assess automations to enhance or streamline security processes.

• Undertake additional responsibilities as assigned.

• Comply with all policies and standards.

⛳️ Requirements

• Must possess authorization to work in the U.S. without requiring employment-based visa sponsorship now or in the future.

• Bachelor’s degree in a quantitative or business discipline (e.g., statistics, mathematics, engineering, computer science) and 2–4 years of relevant experience, or equivalent expertise gained through applicable knowledge, duties, scope, and skills.

• Proven experience in developing security automation or orchestration solutions.

• Strong skills in Python scripting and development.

• Familiarity with JSON and REST APIs.

• Experience in integrating applications and security technologies.

• Understanding of security operations, incident response, and security alert workflows.

• Experience in troubleshooting API, scripting, authentication, and integration challenges.

• Knowledge of Git and contemporary software development practices.

• Capability to convert manual or semi-manual processes into reliable automated workflows.

• Strong analytical and problem-solving abilities.

• Ability to collaborate with both technical and non-technical stakeholders.

• Hands-on experience with enterprise SOAR platforms is preferred.

• Experience with Tines is preferred.

• Familiarity with SIEM, EDR, threat intelligence, vulnerability management, IAM, ticketing, and other enterprise security platforms is preferred.

• Experience in developing custom integrations and reusable automation components is preferred.

• Familiarity with CI/CD pipelines, automated code scanning, and secure development practices is preferred.

• Knowledge of common cybersecurity frameworks, security operations processes, and incident-response methodologies is preferred.

• Intermediate ability to acquire expertise in the area of specialty.

• Intermediate ability to identify basic problems and procedural inconsistencies, gather data, establish facts, and draw valid conclusions.

• Intermediate ability to work independently.

🏝️ Benefits

• Competitive salary.

• Health insurance coverage.

• 401K plan.

• Stock purchase options.

• Tuition reimbursement.

• Paid time off along with holidays.

• Flexible work arrangements including remote, hybrid, field, or office work schedules.

• Additional incentives may be part of the overall compensation package.