Integration Engineer

Cywarden · AI Agentic Cyber Platform · Engineering · 12-week contract to hire

Location: Bay Area (Dublin, CA) · work from office

About Cywarden

Cywarden is a cybersecurity and technology firm that advises, implements and runs 24x7 security and IT operations for enterprises, with delivery centers in Pune and Mohali. We partner with Google Cloud, Microsoft Sentinel, Wazuh and SolarWinds.

We are building the Cywarden AI Agentic Cyber Platform. Enterprises deploy it inside their own Azure or Google Cloud tenant, and its AI agents do real security work: triaging alerts, managing vulnerabilities, running pentests, reviewing firewalls and pushing approved fixes.

The role

Every module of the platform depends on data from the tools a client already runs. You build the connectors that pull that data in, map it to one shared finding schema, merge duplicates, and write results back to ticketing and code systems. When a scanner, a firewall and a SIEM all report the same issue, your work is why the client sees one finding, not five.

What you will build

• Connectors for vulnerability and exposure tools: Qualys, Tenable, Google Security Command Center, Trivy, Semgrep, OWASP ZAP, Nuclei and Nmap.
• Connectors for security operations: Microsoft Sentinel (KQL through the Log Analytics API) and Google SecOps.
• Network connectors: Cisco FMC and Security Cloud Control, Cisco ASA collection through a jump host, and the Meraki Dashboard API.
• Work-system integrations with two-way sync: ServiceNow (incidents and change requests), Jira, and a GitHub App for repositories and pull requests.
• The shared finding schema and the merge logic: CVE or CWE plus asset, first and last seen, evidence, and the source of every field.
• Target discovery: repositories, image registries, clusters, DNS zones and IP ranges pulled from connected systems, so users pick targets instead of typing them.
• Reliability: pagination, rate limits, retries, incremental sync, and alerts when a source goes quiet.

Tools you will use

Python, Go or TypeScript, Postgres, Pub/Sub and Service Bus, KQL, ServiceNow Table API, Jira REST, GitHub App APIs, Cisco and Meraki APIs, Docker, GitHub Actions.

What you bring

• 4+ years building integrations or data pipelines in Python, Go or TypeScript.
• Deep comfort with REST and GraphQL APIs, OAuth, API keys and webhooks.
• Experience with at least two security tools' APIs, such as Qualys, Tenable, Sentinel, CrowdStrike or ServiceNow SecOps.
• Data modeling and normalization: designing one schema that many vendors map into without losing meaning.
• A test-first habit: recorded API fixtures, contract tests and sample data for every connector.

Nice to have

• Cisco FMC or Meraki API experience; reading firewall configs.
• SARIF, CycloneDX or SPDX formats.
• Building MCP servers so agents can call your connectors as tools.
• Experience at an MSSP, SOC or vulnerability management team.

Cywarden is an equal opportunity employer. We welcome applicants of every background.