Senior SOAR Developer (Google Chronicle)

Senior SOAR Developer (Google Chronicle)

Location: Texas (Remote – USA Only)
Work Mode: 100% Remote

Position Summary

We are seeking a highly skilled and experienced Senior SOAR Developer to join our cybersecurity team. This role is critical to advancing our security posture through the design, development, and maintenance of automated security workflows and playbooks.

The ideal candidate has deep experience with SOAR platforms, strong cybersecurity domain knowledge, and expert-level Python proficiency. This is a technical leadership role requiring hands-on development, mentorship, and close collaboration with SOC and threat intelligence teams.

Must-Have Skills

• Security automation
• SOAR platforms
• Python (expert-level coding)
• Cybersecurity
• Security Operations Center (SOC) experience
• Google Chronicle SOAR

Preferred Qualifications

• Hands-on experience with Google Chronicle SOAR, including custom actions, connectors, and playbooks
• Relevant cybersecurity certifications such as CISSP, GCIH, or GIAC Certified Automation Engineer (GSAE)
• Prior experience working in a Security Operations Center (SOC) or similar security role
•  

Key Responsibilities

• SOAR Development & Engineering: Design, develop, and maintain automated playbooks and workflows within a SOAR platform (strong preference for Google Chronicle)
• Case Management & Incident Response: Automate incident response and case management workflows to accelerate detection, investigation, and remediation
• Platform Integration: Build custom integrations and connectors using APIs to connect the SOAR platform with SIEM, EDR, threat intelligence platforms, and vulnerability scanners
• Python Scripting: Write clean, efficient, and reusable Python code for security automation, data enrichment, and custom functionality
• Mentorship & Collaboration: Provide technical leadership and mentorship to junior developers and security analysts; collaborate with SOC teams, threat intelligence, and incident response teams
• Process Improvement: Identify opportunities to automate manual security tasks, improve operational efficiency, and reduce MTTR
• Documentation & Best Practices: Create and maintain documentation for playbooks, integrations, and automation scripts; enforce best practices in security automation and software development

Required Skills & Qualifications

• Experience:
• 5+ years of software development experience
• At least 3 years focused on security automation and SOAR development
• SOAR Platforms:
• Hands-on experience with at least one major SOAR platform
• Strong preference for Google Chronicle SOAR
• Experience with Cortex XSOAR, Splunk SOAR, or IBM SOAR is a plus
• Programming:
• Expert-level Python proficiency (mandatory)
• Experience with REST APIs, JSON
• PowerShell or Bash is a plus
• Security Domain Knowledge:
• Incident response
• Threat detection & intelligence
• Vulnerability management
• Case Management:
• Experience with Jira, ServiceNow, or similar ticketing systems
• Cloud & Infrastructure:
• Familiarity with Google Cloud Platform, AWS, or Azure
• Strong understanding of IT infrastructure and network security
• Soft Skills:
• Strong problem-solving and analytical skills
• Excellent communication
• Comfortable working independently and in fast-paced team environments