{"schemaVersion":"jobsearcher.job.v1","id":"d0501c39b664b91a9b682c5a","url":"https://jobsearcher.com/jobs/d0501c39b664b91a9b682c5a","canonicalUrl":"https://jobsearcher.com/jobs/d0501c39b664b91a9b682c5a","title":"Security Automation Workflow Developer (SOAR/GRC) (R-00180)","description":"True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.\n\nJob Responsibilities\nThe API Workflow Developer will design, build, test, and maintain cybersecurity automation workflows and integrations within an enterprise Security Orchestration, Automation, and Response (SOAR) environment. This is a hands-on development role for an engineer who can consistently deliver production-ready playbooks, API integrations, scripts, and automated processes. The developer will work closely with security operations, engineering, compliance, and platform teams to convert manual processes into reliable and maintainable automation.\nDesign, develop, test, deploy, and maintain SOAR playbooks, workflows, integrations, and automated response actions.\nTranslate manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.\nDevelop REST API integrations between the SOAR platform and SIEM, EDR, ticketing, identity, asset-management, vulnerability-management, threat-intelligence, and GRC systems.\nWrite and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.\nConfigure workflow logic, triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.\nTroubleshoot failed workflows, API errors, authentication issues, malformed data, integration defects, and platform performance problems.\nCollaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.\nTest workflows using representative data and validate that automated actions produce accurate, secure, and expected results.\nMaintain API documentation, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.\nUse source control, code review, configuration management, and controlled release processes to manage automation content.\nMonitor deployed automations, review execution logs and performance metrics, and continuously improve reliability and efficiency.\nProvide operational support, defect remediation, platform maintenance, and knowledge transfer for SOAR workflows and integrations.\nJob Qualifications\nBachelor’s degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent professional experience.\nThree to five years of experience in API development, workflow automation, security engineering, software development, or a related technical role.\nDemonstrated hands-on experience developing SOAR playbooks and integrations using platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, Tines, Swimlane, Torq, or an equivalent solution.\nProficiency in Python and experience developing scripts for automation, data processing, API integration, and error handling.\nStrong experience with REST APIs, JSON, webhooks, OAuth 2.0, API keys, tokens, certificates, and other authentication methods.\nWorking knowledge of cybersecurity operations, including incident response, alert triage, threat intelligence, vulnerability management, and case management.\nExperience with Git, code reviews, testing, debugging, logging, documentation, and structured software-development practices.\nAbility to troubleshoot integrations across multiple systems and analyze logs, HTTP responses, data payloads, and workflow execution results.\nStrong communication and collaboration skills, with the ability to convert operational requirements into reliable technical solutions.\nClearance Requirement\nAbility to obtain may be required\n\nWe’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:\nCompetitive salary, paid twice per month\nBest in class medical coverage\n100% of medical premiums covered by True Zero\nCompany wide new business incentive programs\nContribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)\n3 weeks of PTO starting + 11 Paid Holidays Annually\n401k Program with 100% company match on the first 4%\nMonthly reimbursement of Cell Phone and Home Internet costs\nPaternity/Maternity Leave\nInvestment in training and certifications to broaden and deepen your technical skills\nWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.","company":"True Zero Technologies","rawCompany":"true zero technologies","city":"Remote","state":"OR","isRemote":false,"isActive":false,"createdAt":"2026-08-03T20:13:59.216Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Automation Workflow Developer (SOAR/GRC) (R-00180)","description":"True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.\n\nJob Responsibilities\nThe API Workflow Developer will design, build, test, and maintain cybersecurity automation workflows and integrations within an enterprise Security Orchestration, Automation, and Response (SOAR) environment. This is a hands-on development role for an engineer who can consistently deliver production-ready playbooks, API integrations, scripts, and automated processes. The developer will work closely with security operations, engineering, compliance, and platform teams to convert manual processes into reliable and maintainable automation.\nDesign, develop, test, deploy, and maintain SOAR playbooks, workflows, integrations, and automated response actions.\nTranslate manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.\nDevelop REST API integrations between the SOAR platform and SIEM, EDR, ticketing, identity, asset-management, vulnerability-management, threat-intelligence, and GRC systems.\nWrite and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.\nConfigure workflow logic, triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.\nTroubleshoot failed workflows, API errors, authentication issues, malformed data, integration defects, and platform performance problems.\nCollaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.\nTest workflows using representative data and validate that automated actions produce accurate, secure, and expected results.\nMaintain API documentation, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.\nUse source control, code review, configuration management, and controlled release processes to manage automation content.\nMonitor deployed automations, review execution logs and performance metrics, and continuously improve reliability and efficiency.\nProvide operational support, defect remediation, platform maintenance, and knowledge transfer for SOAR workflows and integrations.\nJob Qualifications\nBachelor’s degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent professional experience.\nThree to five years of experience in API development, workflow automation, security engineering, software development, or a related technical role.\nDemonstrated hands-on experience developing SOAR playbooks and integrations using platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, Tines, Swimlane, Torq, or an equivalent solution.\nProficiency in Python and experience developing scripts for automation, data processing, API integration, and error handling.\nStrong experience with REST APIs, JSON, webhooks, OAuth 2.0, API keys, tokens, certificates, and other authentication methods.\nWorking knowledge of cybersecurity operations, including incident response, alert triage, threat intelligence, vulnerability management, and case management.\nExperience with Git, code reviews, testing, debugging, logging, documentation, and structured software-development practices.\nAbility to troubleshoot integrations across multiple systems and analyze logs, HTTP responses, data payloads, and workflow execution results.\nStrong communication and collaboration skills, with the ability to convert operational requirements into reliable technical solutions.\nClearance Requirement\nAbility to obtain may be required\n\nWe’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:\nCompetitive salary, paid twice per month\nBest in class medical coverage\n100% of medical premiums covered by True Zero\nCompany wide new business incentive programs\nContribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)\n3 weeks of PTO starting + 11 Paid Holidays Annually\n401k Program with 100% company match on the first 4%\nMonthly reimbursement of Cell Phone and Home Internet costs\nPaternity/Maternity Leave\nInvestment in training and certifications to broaden and deepen your technical skills\nWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.","datePosted":"2026-08-03T20:13:59.216Z","dateModified":"2026-08-03T20:13:59.216Z","hiringOrganization":{"@type":"Organization","name":"True Zero Technologies","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote","addressRegion":"OR","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"d0501c39b664b91a9b682c5a"},"url":"https://jobsearcher.com/jobs/d0501c39b664b91a9b682c5a"}}