Senior Developer (SOAR)

We are seeking a seasoned JavaScript Developer with a strong background in cybersecurity automation to join our Integrations, Detection, and Response organization. The ideal candidate will have extensive experience in developing and maintaining SOAR workflows, integrating with various third-party security vendors, and enhancing incident response capabilities through automation. You'll be working as a SOAR developer on our Endpoint Detection Team, responsible for ensuring the quality and scale of our response actions and automated responses to our Security Services teams and customers.
Responsibilities:
Providing mentorship and technical leadership to the team, and auditing the current response capabilities versus the opportunities based on individual EDRs' APIs.
Run end-to-end testing and help improve or automate this process to ensure quality.
Participate in the full software development life cycle, building well-designed, testable, efficient, secure code.
Interface with Security Services teams, Product Management, Incident Response, and customers to identify further SOAR capabilities to help expedite. investigations/forensics, automate detections, and generally improve the security exposure of customers.
Update technical documentation to reflect changes in workflows, integrations, and system configurations.
Help shape the roadmap of our SOAR platform capabilities and architecture.
Stay informed about the latest security threats, SOAR platform updates, and automation best practices to continuously improve system effectiveness.
Develop professional expertise, apply company policies and procedures to resolve a variety of issues.
Determine a course of action based on guidelines, and modify processes and methods as required.
Continuously learning and adopting best practices for code quality, software development methodologies, and programming principles to enhance coding skills and stay updated with industry advancements.
Requirements:
6 or more years of professional experience as a software developer with a focus on JavaScript, including at least 3 years of experience in developing security automation solutions within SOAR platforms.
Experience with RESTful APIs, JSON, and other web technologies; familiarity with Python is a plus.
Hands-on experience with SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR (formerly Phantom), or IBM Resilient, including playbook development and system integration.
Experience integrating with security tools like centralized logging (e. g., Splunk, ELK stack), EDRs, threat intelligence platforms, and ticketing systems (e. g., ServiceNow, Zendesk).
Strong analytical and problem-solving skills with the ability to troubleshoot complex integration and automation issues.
Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders.
Experience and interest in mentoring junior employees. This role will be helping teach detection engineers how to best leverage SOAR while writing detections and expand their technical abilities to write their own SOAR playbooks and integrations.
Experience working in Agile development environments, preferably with formal Agile training, utilizing tools like JIRA and Confluence.
Nice to have: Professional certifications in Security and/or software development (i. e. CISSP, CEH, or vendor-specific SOAR certifications).
Nice to have: A clear history of technical influence (public conference talks, papers, etc).
Nice to have: B. Sc. in Computer Science, Computer Engineering, Cybersecurity, or other relevant degree.

Experience
5-10 yrs