SOC Web Developer
Company Description
Treantly is dedicated to strengthening its cybersecurity operations through innovative automation and secure web development practices. We are looking for a Cybersecurity Web Developer with a strong background in security operations, SOAR (Swimlane) development, and intelligent automation to help us improve our defense capabilities and streamline security workflows.
Role Description
The Cybersecurity Web Developer will design, develop, and maintain secure web applications and automation solutions within the SOC environment. This role requires expertise in SOAR development (Swimlane), incident automation, correlation, and intelligent automation (IA) to optimize threat detection and response processes. The ideal candidate brings a blend of software development skills, cybersecurity knowledge, and SOC experience to create scalable, secure, and effective automation solutions.
Key Responsibilities
- Design, develop, and maintain secure web applications to support SOC workflows.
- Build and enhance SOAR (Swimlane) integrations, playbooks, and automation scripts to improve incident response efficiency.
- Develop intelligent automation (IA) solutions to reduce manual effort in threat detection, triage, and remediation.
- Correlate security events across multiple platforms (SIEM, SOAR, IDS/IPS, EDR) to identify actionable threats.
- Collaborate with SOC analysts, incident responders, and engineers to understand requirements and deliver automation use cases.
- Implement secure coding practices and ensure compliance with security standards and frameworks (e.g., OWASP, NIST, ISO).
- Conduct code reviews, vulnerability assessments, and penetration testing on developed applications.
- Maintain documentation for SOAR workflows, web applications, and automation processes.
- Stay current with emerging threats, technologies, and development frameworks to enhance SOC capabilities.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
- 3+ years of experience as a Developer or Security Engineer with exposure to SOC operations.
- Strong proficiency in programming/scripting languages (Python, JavaScript, PowerShell, or similar).
- Hands-on experience developing automation and playbooks in SOAR platforms (Swimlane preferred).
- Knowledge of SIEM platforms (Splunk, Sentinel, QRadar, etc.) and integration with SOAR.
- Familiarity with intelligent automation (IA), event correlation, and security orchestration processes.
- Solid understanding of web development frameworks and secure coding practices.
- Background in cybersecurity with knowledge of incident response, vulnerability management, and threat detection.
- Certifications such as GIAC (GDSA, GCDA, GCTI), CEH, or equivalent are a plus.
- Strong problem-solving, analytical, and collaboration skills.
Benefits
- Opportunities for growth and advancement
- Competitive compensation package, including Maxicare HMO
- Full-time, Remote