SOAR Engineer

job summary: Randstad is seeking a Senior SOAR Automation Engineer for a contract engagement with a premier enterprise transportation client. Reporting within the Cyber Advisory Governance and Enablement (CAGE) group, this role focuses heavily on workflow execution, low-code/no-code automation, and API development rather than traditional incident response. Working alongside a Lead SOAR Architect, you will optimize governance, risk, and compliance (GRC) capabilities within the Swimlane platform to build a single-pane-of-glass view across the organization's security stack. You will conduct technical discovery with stakeholders, build custom widgets and dashboards, and create scalable playbooks that automate complex security and operational workflows. location: Washington, Washington, D.C. job type: Contract salary: $60 - 65 per hour work hours: 9am to 5pm responsibilities: Swimlane Workflow Development: Design, build, and optimize automated playbooks, workflows, custom widgets, and user interfaces within the Swimlane SOAR platform. API & System Integration: Develop custom API connectors and data pipelines to integrate Swimlane with enterprise security tools, IT service management systems (e.g., ServiceNow), CMDBs, and cloud environments. Process & GRC Automation: Streamline risk triage, escalation, and compliance workflows; normalize operational datasets; and implement error handling, logging, and performance monitoring. Requirements & Stakeholder Engagement: Conduct technical discovery sessions to translate business and security needs into user stories, epics, technical specifications, and functional playbooks. Governance & Documentation: Maintain strict change controls, data validation standards, and technical documentation across all automation pipelines to support ongoing audit and compliance initiatives. qualifications: Core SOAR Expertise: 3 to 5 years of hands-on experience developing and deploying automated playbooks, with strong preferred expertise in Swimlane. (Experience with Splunk SOAR or Microsoft Sentinel will be considered with transferable development skills.) Development Focus: Proven background in workflow engineering, software development, or API integrations (Python, REST APIs, JSON) rather than a pure Security Operations Center (SOC) or Incident Response (IR) background. Data & Interface Customization: Experience building custom forms, dashboards, reporting analytics, and dataset enrichment pipelines within security automation tools. Systems Familiarity: Working knowledge of cloud platforms (AWS, Azure, M365), ticketing systems, and hybrid enterprise infrastructure. Collaborative Mindset: Strong communication skills to gather requirements from non-technical stakeholders and collaborate effectively with lead architects and peer developers in an Agile environment. Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status. At OpenKyber, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, OpenKyber offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility). This posting is open for thirty (30) days. #J-18808-Ljbffr