API Workflow Developer (R-00180)

The API Workflow Developer will design, build, test, and maintain cybersecurity automation workflows and integrations within an enterprise Security Orchestration, Automation, and Response (SOAR) environment. This is a hands-on development role for an engineer who can consistently deliver production-ready playbooks, API integrations, scripts, and automated processes. The developer will work closely with security operations, engineering, compliance, and platform teams to convert manual processes into reliable and maintainable automation.

Design, develop, test, deploy, and maintain SOAR playbooks, workflows, integrations, and automated response actions.

Translate manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.

Develop REST API integrations between the SOAR platform and SIEM, EDR, ticketing, identity, asset-management, vulnerability-management, threat-intelligence, and GRC systems.

Write and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.

Configure workflow logic, triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.

Troubleshoot failed workflows, API errors, authentication issues, malformed data, integration defects, and platform performance problems.

Collaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.

Test workflows using representative data and validate that automated actions produce accurate, secure, and expected results.

Maintain API documentation, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.

Use source control, code review, configuration management, and controlled release processes to manage automation content.

Monitor deployed automations, review execution logs and performance metrics, and continuously improve reliability and efficiency.

Provide operational support, defect remediation, platform maintenance, and knowledge transfer for SOAR workflows and integrations.