Senior Software Engineer
About the role
The Senior Software Engineer will focus on developing and optimizing automation workflows within Hyperautomation or other SOAR platforms, such as XSOAR, Splunk SOAR, LogicHub, and Swimlane. The role involves building API integrations between various security tools, working extensively with JSON for data exchange, and streamlining incident response automation. Responsibilities also include designing scalable and fault-tolerant automation processes, maintaining CI/CD pipeline infrastructure, collaborating with security teams, leading migration projects, and implementing emerging automation techniques to enhance SOC and MSSP workflows. Candidates should have experience in security automation, scripting, API integration, and working with SIEM and EDR/XDR tools.
Must have
- 1+ years of experience in security automation, SOAR engineering, or cybersecurity automation within an MSSP, DFIR, or enterprise security environment
- Extensive experience working with JSON, including JSON schema design, manipulation, parsing, and API-based data transformations
- Strong scripting skills in Python, PowerShell, JavaScript or Bash for workflow automation
- Proficiency in API development and integration, including RESTful APIs, JSON-based APIs and webhook automation
- Experience working with SIEM (Splunk, Sentinel, QRadar, Rapid7 IDR, etc.) and EDR/XDR tools (Crowdstrike, SentinelOne, Cortex XDR, Stellar Cyber, etc.)
- Familiar with Ansible and DORA practices
Nice to have
- Experience in multi-client environments (MSSP, IR firms, or security service providers)
- Hands-on experience with hyperautomation, XSOAR, Splunk SOAR, or similar platforms
- Certifications: CompTIA Security+, AWS/Azure Security Certifications
- Proficiency in using JQ filters for data manipulation
- Experience automating cloud security workflows (AWS, Azure, Google Cloud)
- Familiarity with case management automation and cross-platform data normalization
- Prior experience leading SOAR migration projects or developing custom security playbooks
Technologies
- Ansible
- AWS
- Azure
- Bash
- CI/CD
- Cloud Security
- CompTIA Security+
- Cortex XDR
- CrowdStrike
- Cybersecurity
- EDR
- GCP
- JavaScript
- JSON
- PowerShell
- Python
- QRadar
- Rapid7
- REST
- SentinelOne
- SIEM
- Splunk
- Stellar Cyber
- Webhooks
- XDR
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka