Vulnerability Analyst /SOAR Developer

Vulnerability Analyst /SOAR Developer

Remote

Position Summary

We are seeking a highly skilled and experienced Senior SOAR Developer to join our cybersecurity team.

This role is crucial for advancing our security posture through the development and maintenance of automated security workflows and playbooks.

The ideal candidate will have extensive experience with SOAR platforms, a deep understanding of the security domain, and expert-level proficiency in Python.

This is a technical leadership role that requires both hands-on development and the ability to mentor and collaborate with other security professionals.

Required Skills & Qualifications

Experience: A minimum of 5+ years of experience in software development or a related field, with at least 3 years focused on security automation and SOAR development.

SOAR Platform: Demonstrated, hands-on experience with at least one major SOAR platform, with a strong preference for Google Chronicle.

Experience with other platforms like Palo Alto Cortex XSOAR, Splunk SOAR, or IBM SOAR is also valuable.

Programming: Expert-level proficiency in Python is a must. Experience with REST APIs, JSON, and other scripting languages (e.g., PowerShell, Bash) is highly desirable.

Security Domain Knowledge: Deep understanding of cybersecurity concepts, including incident response, threat detection, threat intelligence, and vulnerability management.

Case Management: Solid experience with security case management and ticketing systems (e.g., Jira, ServiceNow).

Cloud & Infrastructure: Familiarity with cloud platforms (Google Cloud Platform, AWS, or Azure) and an understanding of IT infrastructure and network security principles.

Soft Skills: Excellent problem-solving, analytical, and communication skills. The ability to work both independently and collaboratively in a fast-paced environment is essential.

Preferred Qualifications

Experience with Google Chronicle SOAR, including the development of custom actions, connectors, and playbooks.

Relevant cybersecurity certifications such as CISSP, GCIH, or GIAC Certified Automation Engineer (GSAE).

Prior experience working in a Security Operations Center (SOC) or a similar security role.