SOAR Automation Engineer

ZipStaff Inc.; Washington (District of Columbia); Hybrid; USD 96,000 - 152,000; Part time

Job summary

ZipStaff is seeking an experienced SOAR Automation Engineer to support security operations for a major national transportation organization in the Washington, DC area. This hybrid role spans security operations and automation engineering, designing and deploying automated workflows, custom playbooks, and API integrations across enterprise systems.

You will translate security needs into technical requirements, improve risk triage and incident remediation, and develop dashboards and analytics

Qualifications

• Hands-on experience building, testing, and deploying custom playbooks and integrations on a leading SOAR platform.

Responsibilities

• Design, build, and maintain automated playbooks, workflows, and API connectors across SaaS, cloud, and on‑prem systems.
• Conduct technical discovery sessions; author user stories, epics, and specifications.
• Streamline risk triage, escalation, and remediation pipelines; normalize and enrich security data.
• Develop custom forms, dashboards, and analytics reporting.
• Troubleshoot platform issues and ensure robust logging and error handling.
• Maintain change controls and documentation for SOAR automations for compliance.

Skills

SOAR

APIs

Python

PowerShell

JavaScript

Restful APIs

Job description

Job Title: SOAR Automation Engineer

Location: Washington, DC (Hybrid / on-site collaboration required)

Employment Type: Contract (W2 through ZipStaff — No C2C or 1099)

About the Opportunity

ZipStaff is seeking an experienced SOAR Automation Engineer to support security operations for a major national transportation organization in the Washington, DC area.

This is a hybrid technical role spanning security operations and automation engineering. You will design and deploy automated workflows, custom playbooks, and API integrations across enterprise systems, translate security and business needs into technical requirements, and improve risk triage and incident remediation.

What You’ll Do:

• Design, build, and maintain automated playbooks, workflows, custom widgets, and API connectors across SaaS, cloud, and on-premises systems (including CMDBs, ticketing tools, and security platforms).
• Conduct technical discovery sessions with business and security stakeholders; author user stories, epics, and technical specifications.
• Streamline risk triage, escalation, and remediation pipelines; normalize and enrich security datasets; monitor automation performance.
• Develop custom forms, user interfaces, dashboards, and analytics reporting.
• Troubleshoot platform issues, manage application performance, and implement error handling and logging.
• Establish and maintain change controls, data validation standards, and documentation for SOAR automations to support enterprise compliance.

Required Qualifications:

• Proven hands-on experience building, testing, and deploying custom playbooks and integrations on a leading SOAR platform (Palo Alto Cortex XSOAR, Splunk SOAR, or Microsoft Sentinel).
• Deep proficiency with RESTful APIs, JSON/XML parsing, and scripting (Python, PowerShell, or JavaScript).
• Experience integrating hybrid environments (AWS, Azure, M365, ITSM platforms).
• Strong understanding of the Incident Response lifecycle, threat mitigation, SecOps workflows, and risk triage frameworks.
• Ability to act as a hybrid technical analyst — translating stakeholder requests into structured requirements, acceptance criteria, and architecture documentation.
• Strong written and verbal communication skills.
• Ability to work in the Washington, DC area for hybrid onboarding and collaborative sessions.
• Must be legally authorized to work in the United States without sponsorship now or in the future.

Preferred Qualifications:

• Experience in transportation, government, or other highly regulated environments.
• Hands-on dashboard / UI development within a SOAR platform.
• Prior work connecting SOAR to CMDB and enterprise ticketing platforms.

About ZipStaff

ZipStaff partners with leading organizations to connect skilled cybersecurity professionals with high-impact contract opportunities. We focus on quality matches and long-term success.