> Markdown version of [/jobs/ext/1447505-security-automation-soar-engineer](https://www.wearedevelopers.com/jobs/ext/1447505-security-automation-soar-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Automation (SOAR) Engineer - **Company:** AnaVation, LLC - **Location:** Reston, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Comptia Cloud+, JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Application Integration Architecture, Code Generation, CompTIA Security+, Cyber Security, Software Design Patterns, Design of User Interfaces, Python (Programming Language), Signalling Connection Control Part (SCCP), Software Engineering, SQL Databases, Systems Integration, TypeScript, Scripting, Large Language Models, Event Driven Architecture, Low-code, Graphql, Software Coding, Restful APIs, Webhooks, GPT, Security Orchestration, Automation & Response, Programming Languages - **Published:** July 26, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17706129?backUrl=%2Fcareer%2F17706129%2FSecurity-Automation-Soar-Engineer-Virginia-Reston ## About the Role * Clearance: Active TS/SCI Clearance with CI Polygraph * Education & Years of Experience: Bachelor's degree and 8 years of experience related to specific functional area. * Certifications: Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date. * The following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP). * Hands-on experience and knowledge with the following: + SOAR Playbook Automation: Proven experience building security orchestration and automated response workflows. + Workflow Logic: Strong grasp of both low-code interface design and pro-code logic handling. + API & Architectures: Deep hands-on experience with REST API integration, webhook management, and event-driven systems. + Incident Response: Understanding of core security incidents, triage procedures, and playbook design patterns. + Frontier LLMs: Familiarity with AI coding tools and LLMs (ChatGPT, Grok, Claude, Claude Code, Codex) is a strong plus. Preferred Qualifications: * Extensive experience with SOAR Playbook Automation * Multiple scripting and development languages * Deep understanding of incident response playbook design ## Description United States, Virginia, Reston 11654 Plaza America Dr (Show on map) Jul 24, 2026 Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: The Security Automation (SOAR) Engineer will build, optimize, and scale our automated incident response workflows. You will bridge security operations and software engineering, using modern low-code/pro-code tools and AI to cut response times and strengthen our threat posture. Core Responsibilities: * Playbook Automation: Design, build, and maintain end-to-end incident response playbooks within our SOAR platform. * Workflow Logic: Write custom automation logic using a mix of low-code tools and pro-code scripting. * Integrations: Connect disparate security tools via REST APIs, webhooks, and event-driven architecture. * Incident Response: Partner with the SOC team to translate manual triage steps into reliable, automated actions. * AI Integration: Leverage frontier LLMs (such as ChatGPT, Grok, Claude Code, or Codex) to enhance automation intelligence and code generation. Primary Languages & Technical Stack * Query & Data: SQL and GraphQL. * Scripting & Development: Proficiency in Python, JavaScript, or TypeScript (at least one required) ## Related Videos - [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension) - [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library) - [Beyond Webhooks: The Future of Scalable API Event Delivery](https://www.wearedevelopers.com/videos/100312-beyond-webhooks-the-future-of-scalable-api-event-delivery) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Streaming AI Responses in Real-Time with SSE in Next.js & NestJS](https://www.wearedevelopers.com/videos/1630-streaming-ai-responses-in-real-time-with-sse-in-next-js-nestjs) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)