Senior Applications Security Engineer – SOAR

This is a fully remote position, open to applicants in Missouri.

📋 Description

• Design, create, test, implement, and sustain SOAR playbooks and automation workflows.

• Build integrations between the SOAR platform and security technologies utilizing REST APIs, Python, JSON, and other integration techniques.

• Streamline repetitive security operations and incident-response tasks through automation.

• Create workflows that enhance security alerts with contextual data and coordinate actions across various security platforms.

• Collaborate with cybersecurity teams to comprehend processes, pinpoint automation opportunities, and convert requirements into technical solutions.

• Develop tailored automation and integrations when existing SOAR functionalities do not meet requirements.

• Refine existing playbooks, scripts, and integrations to ensure reliability, maintainability, performance, and operational efficiency.

• Diagnose complex automation, API, integration, and workflow challenges.

• Maintain technical documentation for playbooks, scripts, integrations, data mappings, and automation workflows.

• Engage in peer reviews, testing, and quality-control processes prior to production deployment.

• Adhere to secure development practices and organizational security standards throughout the development lifecycle.

• Regularly assess automations and identify opportunities to enhance or simplify security processes.

• Perform other assigned tasks.

• Follow all policies and standards.

⛳️ Requirements

• Must have authorization to work in the U.S. without requiring employment-based visa sponsorship now or in the future.

• Bachelor's degree in a quantitative or business discipline (e.g., statistics, mathematics, engineering, computer science), or equivalent experience gained through relevant knowledge, duties, scope, and skills.

• Requires 4–6 years of related experience.

• Experience in developing security automation or orchestration solutions.

• Proficient Python scripting and development abilities.

• Familiarity with JSON and REST APIs.

• Experience in integrating applications and security technologies.

• Understanding of security operations, incident response, and security alert workflows.

• Experience troubleshooting API, scripting, authentication, and integration challenges.

• Knowledge of Git and contemporary software development methodologies.

• Ability to convert manual or semi-manual processes into dependable automated workflows.

• Strong analytical and problem-solving capabilities.

• Capacity to collaborate with both technical and non-technical stakeholders.

• Practical experience with enterprise SOAR platforms.

• Experience with Tines.

• Familiarity with SIEM, EDR, threat intelligence, vulnerability management, IAM, ticketing, and other enterprise security platforms.

• Experience in developing custom integrations and reusable automation components.

• Understanding of CI/CD pipelines, automated code scanning, and secure development practices.

• Knowledge of prevalent cybersecurity frameworks, security operations processes, and incident-response methodologies.

• Intermediate knowledge acquisition in the area of specialty.

• Intermediate ability to identify issues and procedural inconsistencies, gather data, establish facts, and draw valid conclusions.

• Intermediate capability to work independently.

• Intermediate analytical skills.

• Intermediate project management abilities.

• Intermediate accuracy under pressure.

• Intermediate judgment and decision-making skills.

🏝️ Benefits

• Competitive salary.

• Health insurance coverage.

• 401K plan.

• Stock purchase options.

• Tuition reimbursement programs.

• Paid time off in addition to holidays.

• Flexible work arrangements including remote, hybrid, field, or office schedules.

• Additional incentive programs may be included in total compensation.