> Markdown version of [/jobs/ext/2788219-security-automation-soar-engineer-in-reston](https://www.wearedevelopers.com/jobs/ext/2788219-security-automation-soar-engineer-in-reston). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Automation (SOAR) Engineer in Reston

- **Company:** Energy Jobline
- **Location:** Reston, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Comptia Cloud+, JavaScript (Programming Language), Application Programming Interfaces (APIs), Application Integration Architecture, CompTIA Security+, Cyber Security, Software Design Patterns, Design of User Interfaces, Python (Programming Language), Signalling Connection Control Part (SCCP), SQL Databases, Systems Integration, TypeScript, Scripting, Large Language Models, Event Driven Architecture, Low-code, Graphql, Restful APIs, Webhooks, GPT, Security Orchestration, Automation & Response
- **Published:** September 8, 2026
- **Apply:** https://www.energyjobline.com/job/security-automation-soar-engineer-reston-31569710

## About the Role

* Clearance: Active TS/SCI Clearance with CI Polygraph
 * Education & Years of Experience: Bachelor's degree and 8 years of experience related to specific functional area.
 * Certifications: Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date.
 * The following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP).
 * Hands-on experience and knowledge with the following:
 + SOAR Playbook Automation: Proven experience building security orchestration and automated response workflows.
 + Workflow Logic: Strong grasp of both low-code interface design and pro-code logic handling.
 + API & Architectures: Deep hands-on experience with REST API integration, webhook management, and event-driven systems.
 + Incident Response: Understanding of core security incidents, triage procedures, and playbook design patterns.
 + Frontier LLMs: Familiarity with AI coding tools and LLMs (ChatGPT, Grok, Claude, Claude Code, Codex) is a strong plus.

Qualifications:

 * Extensive experience with SOAR Playbook Automation
 * Multiple scripting and development
 * Deep understanding of incident response playbook design

## Description

* Playbook Automation: Design, build, and maintain end-to-end incident response playbooks within our SOAR platform.
 * Workflow Logic: Write custom automation logic using a mix of low-code tools and pro-code scripting.
 * Integrations: Connect disparate security tools via REST APIs, webhooks, and event-driven architecture.
 * Incident Response: Partner with the SOC team to translate manual triage steps into reliable, automated actions.
 * AI Integration: Leverage frontier LLMs (such as ChatGPT, Grok, Claude Code, or Codex) to enhance automation intelligence and code .

Primary & Technical Stack

 * Query & Data: SQL and GraphQL.
 * Scripting & Development: Proficiency in Python, JavaScript, or TypeScript (at least one required)


## Related Videos

- [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension)
- [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library)
- [Beyond Webhooks: The Future of Scalable API Event Delivery](https://www.wearedevelopers.com/videos/100312-beyond-webhooks-the-future-of-scalable-api-event-delivery)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Speak, Code, Deploy: Transforming Developer Experience with Voice Commands](https://www.wearedevelopers.com/videos/1159-speak-code-deploy-transforming-developer-experience-with-voice-commands)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)