SOAR Automation Engineer

job summary:

Randstad is seeking an experienced SOAR Automation Engineer for a high-profile client engagement based in Washington, DC. In this dynamic hybrid role, you will serve as the technical bridge between security operations and automation engineering, designing and deploying automated workflows, custom playbooks, and API integrations across diverse enterprise systems. You will lead technical discovery sessions with stakeholders, translate complex business and security needs into precise technical requirements, and optimize risk triage and incident remediation processes. By building custom dashboards, normalizing datasets, and maintaining robust change controls, you will streamline SecOps capabilities while driving operational efficiency across cloud and on-premises environments.

location: Washington, Washington, D.C.

job type: Contract

salary: $55 - 60 per hour

work hours: 9am to 5pm

education: Bachelors



responsibilities:

• Workflow & Integration Engineering: Design, build, and maintain automated playbooks, workflows, custom widgets, and API connectors across SaaS, cloud, and on-premises systems (including CMDBs, ticketing tools, and security platforms).
• Requirements & Stakeholder Engagement: Conduct technical discovery sessions with business and security stakeholders to gather requirements, identify process inefficiencies, and author clear user stories, epics, and technical specifications.
• Process & Risk Optimization: Streamline risk triage, escalation, and remediation pipelines; normalize and enrich security datasets; and continuously monitor automation performance for efficiency gains.
• Platform Operations & UI Development: Develop custom forms, user interfaces, dashboards, and analytics reporting while troubleshooting platform issues, managing application performance, and implementing robust error handling and logging.
• Governance & Compliance: Establish and maintain strict change controls, data validation standards, and documentation for all SOAR automations to support enterprise compliance initiatives.

qualifications:

Technical Expertise: Proven hands-on experience building, testing, and deploying custom playbooks and integrations within leading SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk SOAR, or Microsoft Sentinel).

API & Systems Integration: Deep proficiency with RESTful APIs, JSON/XML parsing, scripting (Python, PowerShell, or JavaScript), and integrating hybrid environments (AWS, Azure, M365, ITSM platforms).

Security & Process Domain Knowledge: Strong understanding of Incident Response lifecycle, threat mitigation, security operations workflows, and risk triage frameworks.

Business Analysis Skills: Demonstrated ability to act as a hybrid technical analyst-translating non-technical stakeholder requests into structured requirements, acceptance criteria, and architecture docs.

Soft Skills & Location: Strong written and verbal communication skills; local or regional proximity to the Washington, DC area for hybrid client onboarding and collaborative sessions.

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.