Security Automation (SOAR) Engineer

AnaVation, LLC
Reston, VA, United States
16 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours

Tech stack

Comptia Cloud+ JavaScript (Programming Language) Application Programming Interfaces (APIs) Artificial Intelligence Application Integration Architecture Code Generation CompTIA Security+ Cyber Security Software Design Patterns Design of User Interfaces Python (Programming Language) Signalling Connection Control Part (SCCP)
+15 more
Software Engineering SQL Databases Systems Integration TypeScript Scripting Large Language Models Event Driven Architecture Low-code Graphql Software Coding Restful APIs Webhooks GPT Security Orchestration, Automation & Response Programming Languages

Job description

United States, Virginia, Reston 11654 Plaza America Dr (Show on map) Jul 24, 2026 Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

The Security Automation (SOAR) Engineer will build, optimize, and scale our automated incident response workflows. You will bridge security operations and software engineering, using modern low-code/pro-code tools and AI to cut response times and strengthen our threat posture.

Core Responsibilities:

  • Playbook Automation: Design, build, and maintain end-to-end incident response playbooks within our SOAR platform.
  • Workflow Logic: Write custom automation logic using a mix of low-code tools and pro-code scripting.
  • Integrations: Connect disparate security tools via REST APIs, webhooks, and event-driven architecture.
  • Incident Response: Partner with the SOC team to translate manual triage steps into reliable, automated actions.
  • AI Integration: Leverage frontier LLMs (such as ChatGPT, Grok, Claude Code, or Codex) to enhance automation intelligence and code generation.

Primary Languages & Technical Stack

  • Query & Data: SQL and GraphQL.
  • Scripting & Development: Proficiency in Python, JavaScript, or TypeScript (at least one required)

Requirements

  • Clearance: Active TS/SCI Clearance with CI Polygraph
  • Education & Years of Experience: Bachelor’s degree and 8 years of experience related to specific functional area.
  • Certifications: Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date.
  • The following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP).
  • Hands-on experience and knowledge with the following:
  • SOAR Playbook Automation: Proven experience building security orchestration and automated response workflows.
  • Workflow Logic: Strong grasp of both low-code interface design and pro-code logic handling.
  • API & Architectures: Deep hands-on experience with REST API integration, webhook management, and event-driven systems.
  • Incident Response: Understanding of core security incidents, triage procedures, and playbook design patterns.
  • Frontier LLMs: Familiarity with AI coding tools and LLMs (ChatGPT, Grok, Claude, Claude Code, Codex) is a strong plus.

Preferred Qualifications:

  • Extensive experience with SOAR Playbook Automation
  • Multiple scripting and development languages
  • Deep understanding of incident response playbook design

Benefits & conditions

  • Generous cost sharing for medical insurance for the employee and dependents
  • 100% company paid dental insurance for employees and dependents
  • 100% company paid long-term and short-term disability insurance
  • 100% company paid vision insurance for employees and dependents
  • 401k plan with generous match and 100% immediate vesting
  • Competitive Pay
  • Generous paid leave and holiday package
  • Tuition and training reimbursement
  • Life and AD&D Insurance

About the company

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team. If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on diversityjobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

40 sec

Generative pre-trained transformer models powering code completions

lgonta lgonta +1 · WWC 2024

2:52 min

Generating APIs with the Neo4j GraphQL library

William Lyon · LIVE

1:28 min

Synchronizing database webhook triggers with pipeline webhooks

Bobur Umurzokov · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

51 sec

Assessing GPT-4o performance for pull request feedback

Merrill Lutsky Merrill Lutsky · WWC 2025

Videos

See all

Related articles

See all