Senior Security Platform Developer

Responsibilities

• Design, develop, test, maintain, and support complex Splunk SOAR automation solutions and Python playbooks.
• Develop reusable Ansible Automation Platform workflows and components using YAML.
• Integrate security platforms, APIs, and enterprise systems to automate security and operational processes.
• Troubleshoot complex application, integration, API, authentication, and workflow issues as a senior technical escalation point.
• Provide technical leadership, mentorship, code reviews, solution guidance, and troubleshooting assistance to junior and intermediate engineers.
• Translate business and security requirements into technical designs and automation solutions.
• Lead technical design and implementation for security initiatives, enterprise projects, proofs of concept, capability evaluations, and production transitions.
• Establish development standards covering source control, code quality, testing, error handling, logging, documentation, reusable components, and maintainability.
• Own automation solutions across design, development, testing, implementation, production support, maintenance, and retirement.
• Lead operationalization and transition of project deliverables into business-as-usual support.
• Develop and maintain cybersecurity playbooks, procedures, technical documentation, and knowledge-base articles.
• Provide technical consultation on architectural, operational, and integration risks.
• Participate in the 24x7 on-call rotation and provide advanced troubleshooting, root-cause analysis, and incident support.
• Collaborate with infrastructure, application, security, and architecture teams on scalable integrations.
• Drive reusable frameworks, common libraries, standardized integration patterns, and continuous improvement across security automation.

Requirements

• At least 5 years of Python development experience designing, developing, testing, and supporting production automation and integrations.
• An Information Technology university degree or related college diploma, or an equivalent combination of education and at least 7 years of relevant Information Technology experience.
• At least 5 years of experience in cybersecurity, security engineering, platform engineering, DevOps, or a related technical discipline.
• Strong experience with REST APIs, JSON, authentication mechanisms, enterprise systems, and complex integration troubleshooting.
• Strong understanding of source control, code reviews, testing, error handling, logging, debugging, and maintainable software design.
• Experience acting as a technical escalation point and providing technical direction during production and major incidents.
• Experience with SOAR tools such as Splunk SOAR or Cortex XSOAR.
• Experience with Ansible development and Python and YAML automation development.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Knowledge of endpoint detection and response, intrusion detection, cryptographic technologies, certificate management, email security, web content filtering, cloud security, and SIEM platforms.
• Experience with Windows and Linux operating systems, enterprise technology deployments, networking technologies, firewalls, web application firewalls, intrusion prevention systems, cloud technologies, and disaster recovery.
• Professional designation such as CISSP, CISM, CISA, GIAC, AWS, or CompTIA Security+ is preferred.
• Strong written and verbal communication skills with the ability to communicate technical issues to peers and management.
• Ability to satisfactorily complete applicable background checks before starting and during employment.

Benefits

• Wellness programs supporting mental, physical, and financial health.
• Career paths with networking opportunities.
• Hybrid work arrangement allowing work from home or the office based on business, client, and leader needs.
• Eligible employees may participate in discretionary incentive plans in addition to base pay.