• The API Workflow Developer will design, build, test, and maintain cybersecurity automation workflows and integrations within an enterprise Security Orchestration, Automation, and Response (SOAR) environment.
• Design, develop, test, deploy, and maintain SOAR playbooks, workflows, integrations, and automated response actions.
• Translate manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.
• Develop REST API integrations between the SOAR platform and SIEM, EDR, ticketing, identity, asset-management, vulnerability-management, threat-intelligence, and GRC systems.
• Write and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.
• Configure workflow logic, triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.
• Troubleshoot failed workflows, API errors, authentication issues, malformed data, integration defects, and platform performance problems.
• Collaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.
• Test workflows using representative data and validate that automated actions produce accurate, secure, and expected results.
• Maintain API documentation, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.
• Use source control, code review, configuration management, and controlled release processes to manage automation content.
• Monitor deployed automations, review execution logs and performance metrics, and continuously improve reliability and efficiency.
• Provide operational support, defect remediation, platform maintenance, and knowledge transfer for SOAR workflows and integrations.
