Back
VI
Lead Software Engineer
Virtusalinkedin.com
Oct 10, 2026, 8:04 AM2w ago
Full-timeColombo, Western ProvinceSoftware engineeringLead (1+ yr)
About the role
The Lead Software Engineer will be responsible for developing and optimizing automation workflows within SOAR platforms such as Torq Hyperautomation, XSOAR, Splunk SOAR, LogicHub, and Swimlane. The role involves building API integrations between various security tools, working extensively with JSON for data exchange, streamlining incident response automation, and maintaining CI/CD pipeline infrastructure. The engineer will collaborate with SOC analysts, DFIR teams, and threat intelligence groups, lead migration projects, and continuously implement emerging automation techniques to enhance SOC and MSSP workflows. The position requires experience in security automation, scripting, API integration, and knowledge of security event management.
Must have
- 1 plus years of experience in security automation SOAR engineering or cybersecurity automation within an MSSP DFIR or enterprise security environment
- Extensive experience working with JSON including JSON schema design manipulation parsing and API based data transformations
- Strong scripting skills in Python PowerShell or Bash for workflow automation
- Proficiency in API development and integration including RESTful APIs JSON based APIs and webhook automation
- Experience working with SIEM such as Splunk Sentinel QRadar Rapid7 IDR and EDR or XDR tools such as CrowdStrike SentinelOne Stellar Cyber Cortex XDR
- Knowledge of incident response threat intelligence and security event lifecycle management
Nice to have
- Experience in multi client environments MSSP IR firms or security service providers
- Hands on experience with Torq Hyperautomation XSOAR Splunk SOAR or similar platforms
- Certifications such as Torq SOAR Analyst Torq SOAR Expert CompTIA Security plus AWS or Azure Security Certifications
- Proficiency in using JQ filters for data manipulation
- Familiarity with CI CD pipelines such as Azure DevOps
- Experience automating cloud security workflows AWS Azure Google Cloud
- Familiarity with case management automation and cross platform data normalization
- Prior experience leading SOAR migration projects or developing custom security playbooks.
Technologies
- AWS
- Azure
- Azure DevOps
- Bash
- CI/CD
- Cloud Security
- Cortex XDR
- CrowdStrike
- Cybersecurity
- EDR
- GCP
- JSON
- PowerShell
- Python
- QRadar
- Rapid7
- REST
- SentinelOne
- SIEM
- Splunk
- Stellar Cyber
- Webhooks
- XDR