Senior SOAR Automation Engineer

BlackCube Labs; Washington (District of Columbia); On-site; USD 124,000 - 179,000; Full time

Benefits offered by this job

Healthcare insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Job summary

ZipStaff is seeking a Senior SOAR Automation Engineer to support cyber governance and enablement in Washington, DC. This on-site contract role focuses on Swimlane automation, API integration, and data pipelines to security tools and ITSM systems.

You’ll work with a Lead SOAR Architect to extend Swimlane automation, create a unified view across the security stack, and deliver compliant playbooks and dashboards in an Agile setting.

Qualifications

• 3–5+ years building and deploying automated playbooks on a SOAR platform.
• Proven workflow engineering, software development, or API integration background (Python, REST APIs, JSON).
• Experience building custom forms, dashboards, analytics, and enrichment pipelines in security automation tools.
• Working knowledge of AWS, Azure, or M365, ticketing systems, and hybrid enterprise infrastructure.
• Strong requirements-gathering skills with non-technical stakeholders.
• Ability to work on-site in Washington, DC.
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Responsibilities

• Design, build, and optimize automated playbooks, workflows, custom widgets, and UIs in Swimlane.
• Develop API connectors and data pipelines from Swimlane to security tools, ServiceNow / ITSM, CMDBs, and cloud environments.
• Automate GRC processes: risk triage, escalation, compliance workflows, dataset normalization, error handling, logging, and performance monitoring.
• Run technical discovery and turn business/security needs into user stories, epics, specs, and playbooks.
• Build custom forms, dashboards, reporting, and dataset-enrichment pipelines.
• Maintain change control, data-validation standards, and technical documentation for audit and compliance.
• Work in Agile with the lead architect and peer developers.

Skills

SOAR playbooks

API integration

Python

REST APIs

JSON

Security automation dashboards

Tools

Swimlane

Splunk SOAR

Microsoft Sentinel

ServiceNow

CMDBs

AWS

Azure

M365

Job description

Job Title: Senior SOAR Automation Engineer (Swimlane)

Location: Washington, DC (On-site)

Employment Type: Contract (W2 through ZipStaff — No C2C or 1099)

About the Opportunity

ZipStaff is seeking a Senior SOAR Automation Engineer to support cyber governance and enablement at a major passenger rail and transportation organization.

This role sits with the Cyber Advisory Governance and Enablement team and is workflow, low-code/no-code, and API development—not a traditional SOC or incident-response seat. You will work with a Lead SOAR Architect to extend GRC automation on Swimlane and build a single-pane view across the security stack.

What You’ll Do

• Design, build, and optimize automated playbooks, workflows, custom widgets, and UIs in Swimlane.
• Develop API connectors and data pipelines from Swimlane to security tools, ServiceNow / ITSM, CMDBs, and cloud environments.
• Automate GRC processes: risk triage, escalation, compliance workflows, dataset normalization, error handling, logging, and performance monitoring.
• Run technical discovery and turn business/security needs into user stories, epics, specs, and playbooks.
• Build custom forms, dashboards, reporting, and dataset-enrichment pipelines.
• Maintain change control, data-validation standards, and technical documentation for audit and compliance.
• Work in Agile with the lead architect and peer developers.

Required Qualifications

• 3–5+ years building and deploying automated playbooks on a SOAR platform.
• Proven workflow engineering, software development, or API integration background (Python, REST APIs, JSON)—not a pure SOC/IR profile.
• Experience building custom forms, dashboards, analytics, and enrichment pipelines in security automation tools.
• Working knowledge of AWS, Azure, or M365, ticketing systems, and hybrid enterprise infrastructure.
• Strong requirements-gathering skills with non-technical stakeholders
• Ability to work on-site in Washington, DC.
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Preferred Qualifications

• Hands-on Swimlane (strongly preferred).
• Splunk SOAR or Microsoft Sentinel with transferable playbook/API skills.
• ServiceNow and CMDB integrations.
• Transportation, rail, or other regulated-enterprise GRC automation.

Benefits

• Healthcare insurance (employee-only).
• Dental insurance.
• Vision insurance.
• 401(k).
• Paid time off.

About ZipStaff

ZipStaff partners with leading organizations to connect skilled technology professionals with high‑impact contract opportunities. We focus on quality matches, clear communication, and long‑term success for candidates and clients.