Design, build, test, and maintain SOAR playbooks, API integrations, and automation for security operations. Convert manual cybersecurity processes into scalable workflows, develop Python scripts and API clients, troubleshoot integrations, and collaborate with analysts and engineers to deploy and support reliable automated responses.
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
Job Responsibilities
- Design, develop, test, deploy, and maintain SOAR playbooks, workflows, integrations, and automated response actions.
- Translate manual cybersecurity and compliance processes into documented, repeatable, and scalable automation workflows.
- Develop REST API integrations between the SOAR platform and SIEM, EDR, ticketing, identity, asset-management, vulnerability-management, threat-intelligence, and GRC systems.
- Write and maintain Python scripts, API clients, custom connectors, functions, data parsers, and reusable automation components.
- Configure workflow logic, triggers, conditions, approvals, error handling, retries, notifications, and escalation paths.
- Troubleshoot failed workflows, API errors, authentication issues, malformed data, integration defects, and platform performance problems.
- Collaborate with analysts, incident responders, engineers, and process owners to gather requirements and define automation use cases.
- Test workflows using representative data and validate that automated actions produce accurate, secure, and expected results.
- Maintain API documentation, workflow diagrams, configuration records, runbooks, test results, and deployment procedures.
- Use source control, code review, configuration management, and controlled release processes to manage automation content.
- Monitor deployed automations, review execution logs and performance metrics, and continuously improve reliability and efficiency.
- Provide operational support, defect remediation, platform maintenance, and knowledge transfer for SOAR workflows and integrations.
The API Workflow Developer will design, build, test, and maintain cybersecurity automation workflows and integrations within an enterprise Security Orchestration, Automation, and Response (SOAR) environment. This is a hands-on development role for an engineer who can consistently deliver production-ready playbooks, API integrations, scripts, and automated processes. The developer will work closely with security operations, engineering, compliance, and platform teams to convert manual processes into reliable and maintainable automation.
Job Qualifications
- Bachelor’s degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent professional experience.
- Three to five years of experience in API development, workflow automation, security engineering, software development, or a related technical role.
- Demonstrated hands-on experience developing SOAR playbooks and integrations using platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, Tines, Swimlane, Torq, or an equivalent solution.
- Proficiency in Python and experience developing scripts for automation, data processing, API integration, and error handling.
- Strong experience with REST APIs, JSON, webhooks, OAuth 2.0, API keys, tokens, certificates, and other authentication methods.
- Working knowledge of cybersecurity operations, including incident response, alert triage, threat intelligence, vulnerability management, and case management.
- Experience with Git, code reviews, testing, debugging, logging, documentation, and structured software-development practices.
- Ability to troubleshoot integrations across multiple systems and analyze logs, HTTP responses, data payloads, and workflow execution results.
- Strong communication and collaboration skills, with the ability to convert operational requirements into reliable technical solutions.
- Clearance Requirement
Ability to obtain may be required
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 Paid Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen your technical skills
Similar Jobs
Artificial Intelligence • Insurance • Machine Learning • Software • Analytics
Hunter-style senior SaaS sales role to build and own a pipeline for a new workers' compensation predictive analytics product. Lead full sales cycle—discovery, demos, proposals, closing—selling into carriers, TPAs, brokers, MGAs, and self-insured employers. Partner with product and customer success, provide market feedback, and exceed annual sales targets.
.png)
Food • Software
Lead and coach a team of ~10 Territory Managers to drive high-velocity SMB restaurant acquisition. Drive predictable revenue, forecast accuracy, pipeline discipline, in-person coaching and co-selling, hiring and onboarding, collaboration with Enablement and RevOps, and personally contribute to selling when needed.
Top Skills:
Salesforce
Food • Software
Outside territory sales role selling ChowNow restaurant technology. Manage full sales cycle, build a book of business from inbound and outbound leads, run demos, use SFDC to manage pipeline, and travel ~45% within the market to meet and close customers.
Top Skills:
Salesforce (Sfdc)
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
