SOAR Developer: Security Orchestration & Automation

Peyton Resource Group; Dallas (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Peyton Resource Group is seeking a SOAR Developer for its Security Operations Center to modernize and streamline incident response. You will build automation, integrate security tools, and develop SOC workflows using Python, JavaScript, and JSON.

The role emphasizes collaboration with engineers, adherence to DevSecOps, and continuous improvement of playbooks and SOPs within a fast-paced environment.

Qualifications

• 2+ years in cybersecurity focusing on SOC or network security.
• Experience with SOAR platforms Swimlane, Phantom, or XSOAR.
• Proficiency in Python scripting and REST APIs.
• Knowledge of SIEMs such as Splunk, XSIAM, or QRadar.
• Experience with DevSecOps practices.

Responsibilities

• Automate SOC incident response processes to analyze and resolve alerts via a single stream management system.
• Author, test, and maintain automation scripts and workflows within the SOAR platform.
• Integrate the SOAR platform with other security tools and APIs to execute automated workflows.
• Develop and maintain custom applications for SOC workflows.
• Design, implement, and maintain efficient, reusable Python, JavaScript, and JSON code.
• Review, debug, and resolve technical issues throughout all stages of the SDLC.

Skills

Python scripting

REST APIs

JSON

HTML/CSS

JavaScript

XML

Visual Studio

DevSecOps

SOAR Swimlane

SOAR Phantom

SOAR XSOAR

SIEM Splunk

SIEM QRadar

SIEM XSIAM

SOC SOPs

Process mapping

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field

Tools

Swimlane

Phantom

Cortex XSOAR

Splunk

QRadar

XSIAM

Visual Studio

Job description

Peyton Resource Group is seeking a SOAR Developer for its Security Operations Center to modernize and streamline incident response. You will build automation, integrate security tools, and develop SOC workflows using Python, JavaScript, and JSON.

The role emphasizes collaboration with engineers, adherence to DevSecOps, and continuous improvement of playbooks and SOPs within a fast-paced environment.