SOAR Automation Engineer: Playbooks & Integrations Pro

BlackCube Labs; Washington (District of Columbia); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Randstad in Washington, DC is hiring an SOAR Automation Engineer for a hybrid role that bridges security operations with automation engineering. You will design and deploy automated playbooks, API connectors, and dashboards across cloud and on‑prem environments.

You will lead technical discovery, translate security and business needs into technical specs, and optimize risk triage and remediation processes within enterprise SecOps teams.

Qualifications

• Hands-on experience building, testing, and deploying custom playbooks and integrations within leading SOAR platforms.
• Proficiency with RESTful APIs, JSON/XML parsing, scripting, and integrating hybrid environments (AWS, Azure, M365, ITSM).
• Strong understanding of Incident Response lifecycle, threat mitigation, and security operations workflows.
• Hybrid technical analyst able to translate requirements into architecture docs and testable criteria.
• Excellent written and verbal communication; able to work near Washington, DC for hybrid onboarding.

Responsibilities

• Design, build, and maintain automated playbooks, workflows, and API connectors across systems.
• Lead technical discovery sessions to gather requirements and author user stories and specs.
• Streamline risk triage and remediation pipelines; normalize and enrich datasets; monitor automation performance.
• Develop custom forms, dashboards, analytics, and handle platform issues with logging and performance tuning.
• Establish and maintain change controls and documentation for all SOAR automations.

Skills

SOAR platforms

RESTful APIs

Scripting (Python/PowerShell/JS)

Incident Response lifecycle

Security operations workflows

Stakeholder engagement

Dashboard development

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Microsoft Sentinel

Job description

Randstad in Washington, DC is hiring an SOAR Automation Engineer for a hybrid role that bridges security operations with automation engineering. You will design and deploy automated playbooks, API connectors, and dashboards across cloud and on‑prem environments.

You will lead technical discovery, translate security and business needs into technical specs, and optimize risk triage and remediation processes within enterprise SecOps teams.