SOAR Automation Engineer

ZipStaff • Washington, DC

4d • Hybrid

About The Position

ZipStaff is seeking an experienced SOAR Automation Engineer to support security operations for a major national transportation organization in the Washington, DC area. This is a hybrid technical role spanning security operations and automation engineering. You will design and deploy automated workflows, custom playbooks, and API integrations across enterprise systems, translate security and business needs into technical requirements, and improve risk triage and incident remediation.

Requirements

• Proven hands-on experience building, testing, and deploying custom playbooks and integrations on a leading SOAR platform (Palo Alto Cortex XSOAR, Splunk SOAR, or Microsoft Sentinel).
• Deep proficiency with RESTful APIs, JSON/XML parsing, and scripting (Python, PowerShell, or JavaScript).
• Experience integrating hybrid environments (AWS, Azure, M365, ITSM platforms).
• Strong understanding of the Incident Response lifecycle, threat mitigation, SecOps workflows, and risk triage frameworks.
• Ability to act as a hybrid technical analyst — translating stakeholder requests into structured requirements, acceptance criteria, and architecture documentation.
• Strong written and verbal communication skills.
• Ability to work in the Washington, DC area for hybrid onboarding and collaborative sessions.
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Nice To Haves

• Experience in transportation, government, or other highly regulated environments.
• Hands-on dashboard / UI development within a SOAR platform.
• Prior work connecting SOAR to CMDB and enterprise ticketing platforms.

Responsibilities

• Design, build, and maintain automated playbooks, workflows, custom widgets, and API connectors across SaaS, cloud, and on-premises systems (including CMDBs, ticketing tools, and security platforms).
• Conduct technical discovery sessions with business and security stakeholders; author user stories, epics, and technical specifications.
• Streamline risk triage, escalation, and remediation pipelines; normalize and enrich security datasets; monitor automation performance.
• Develop custom forms, user interfaces, dashboards, and analytics reporting.
• Troubleshoot platform issues, manage application performance, and implement error handling and logging.
• Establish and maintain change controls, data validation standards, and documentation for SOAR automations to support enterprise compliance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed