ZipRecruiter

Log In

1

Siem Soar Developer Jobs (NOW HIRING)

Hansen Talent Group

AI Security Engineer

Columbia, SC · On-site

The AI Security Engineer will be responsible for supporting SIEM and SOAR integrations across the client environment as well as build and tune AI playbooks. Duties: * Collaborate with business units ...

Tenex

Forward Deployed Data Architect

Kansas City, MO · On-site

$180 - $260/hr

All responsibilities of a Security Solution Engineer -- SIEM/SOAR, at greater scale and complexity * Define the content architecture strategy across platforms -- detection frameworks, parser ...

Tenex

Forward Deployed Data Architect

Sarasota, FL · On-site

$180 - $260/hr

All responsibilities of a Security Solution Engineer -- SIEM/SOAR, at greater scale and complexity * Define the content architecture strategy across platforms -- detection frameworks, parser ...

Tenex

Forward Deployed Data Architect

Scottsdale, AZ · On-site

$180 - $260/hr

All responsibilities of a Security Solution Engineer -- SIEM/SOAR, at greater scale and complexity * Define the content architecture strategy across platforms -- detection frameworks, parser ...

previous page

Showing results 41-60

All JobsSiem Soar Developer Jobs

Siem Soar Developer information

See salary details

$17

$52

$81

How much do siem soar developer jobs pay per hour?

As of Sep 3, 2026, the average hourly pay for siem soar developer in the United States is $52.84, according to ZipRecruiter salary data. Most workers in this role earn between $40.38 and $64.66 per hour, depending on experience, location, and employer.

What is a SIEM SOAR developer?

SIEM SOAR Developers are IT professionals who specialize in designing, implementing, and maintaining Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) systems. They build solutions that help organizations detect, analyze, and respond to cybersecurity threats by integrating automated workflows and advanced analytics. These developers often work closely with security teams to customize SIEM and SOAR platforms, automate incident response tasks, and ensure security tools work together efficiently. Their work is crucial for improving response times and reducing the impact of security incidents.

What are the key skills and qualifications needed to thrive as a SIEM SOAR developer?

To thrive as a SIEM SOAR Developer, you need a strong background in cybersecurity, scripting/programming (such as Python or JavaScript), and experience with SIEM and SOAR platforms like Splunk, IBM QRadar, or Palo Alto Cortex XSOAR. Familiarity with security event monitoring tools, incident response processes, and relevant certifications (e.g., Splunk Certified, GIAC, or CompTIA Security+) is often required. Problem-solving, analytical thinking, and effective communication are crucial soft skills for designing automations and collaborating with security teams. These skills ensure the effective detection, analysis, and automated response to threats, helping organizations strengthen their security posture.

What are some common challenges faced by SIEM SOAR developers when integrating new data sources or security tools?

SIEM SOAR Developers often encounter challenges when integrating new data sources or security tools, such as dealing with inconsistent log formats, ensuring data normalization, and maintaining compatibility across diverse systems. Additionally, developers must carefully manage access controls and automation scripts to avoid introducing security gaps. Successful integration typically requires strong collaboration with security analysts and IT teams to understand data flows and ensure that integrations align with organizational security policies.

What is the difference between Siem Soar Developer vs Siem Analyst?

AspectSiem Soar DeveloperSiem Analyst
Primary RoleDesigning, developing, and customizing SOAR playbooks and automation workflowsMonitoring, analyzing, and responding to security alerts within SIEM systems
Skills & CertificationsSIEM/SOAR platform expertise, scripting, security certifications (e.g., CISSP, CEH)SIEM platform knowledge, incident response, security certifications
Work EnvironmentSecurity operations centers, cybersecurity teams, development environmentsSecurity operations centers, incident response teams

While both roles work within cybersecurity and SIEM tools, Siem Soar Developers focus on creating automation and integrations using SOAR platforms, whereas Siem Analysts primarily monitor and analyze security alerts to respond to threats.

Infographic showing various Siem Soar Developer job openings in the United States as of August 2026, with employment types broken down into 85% Full Time, 3% Part Time, and 12% Contract. Highlights an 80% Physical, 5% Hybrid, and 15% Remote job distribution, with an average salary of $109,905 per year, or $52.8 per hour.

Cyber Defense Engineer - SIEM

NorthMark Strategies

New York, NY • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 19 days ago

Job description

The Company
NorthMark Strategies is a leading investment firm, combining capital, innovation, and engineering to drive long-term value. From operating complex businesses to backing breakthrough technologies, our mission is to build enduring businesses. Our team combines intelligent risk-taking, operational excellence, exceptional talent, and world-class computing capacity to create shareholder value.
Our company offers a dynamic environment where individuals have the freedom to lead companies toward bold achievements by embracing innovation, leveraging technology, and fostering differentiated business strategies. Our values are Integrity, Ability, and Energy, and the company aims to hire individuals who possess those qualities.
At NorthMark Strategies, we believe the future isn't something to hope for, it's something to build. We don't just invest, we create. Bringing together strategic insight and technical horsepower to deliver outcomes that endure.
The Position
The Cyber Defense Engineer - SIEM reports to the Director of Cyber Defense and operates within the Office of the CISO. This role is responsible for architecting, developing, and implementing advanced security solutions that enhance cyber defense investigations and incident response capabilities.
This position places a strong emphasis on AI-driven security engineering, including the development of intelligent detection systems, automation pipelines, and data-driven defense mechanisms. The ideal candidate will combine deep expertise in the Microsoft security ecosystem with experience leveraging artificial intelligence and machine learning to improve SIEM/SOAR performance, detection fidelity, and operational efficiency.
You will collaborate across IT and security teams to design scalable logging, enrichment, and response architectures, while continuously advancing the organization's AI-enabled SIEM engineering maturity.
Responsibilities:
Design, develop, and deploy AI-enhanced detections and automations within the SIEM/SOAR platform to improve signal-to-noise ratio and reduce alert fatigue.
  • Engineer and optimize SIEM pipelines using AI/ML techniques for anomaly detection, behavioral analytics, and threat correlation.
  • Integrate SIEM with security tools and data sources to build a context-rich, intelligence-driven monitoring ecosystem.
  • Develop and implement AI-assisted threat detection models, including user/entity behavior analytics (UEBA) and predictive analytics.
  • Collaborate with cyber defense operations to identify emerging threats and capability gaps, leveraging AI to proactively strengthen defenses.
  • Build and maintain automated response orchestration and intelligent playbooks that adapt based on threat context.
  • Design automation for alert enrichment, triage, and response using both rule-based and AI-assisted decisioning frameworks.
  • Partner with IT and engineering teams to ensure comprehensive telemetry collection and high-quality data pipelines.
  • Continuously improve SIEM engineering practices, including data normalization, enrichment strategies, and AI model tuning.
  • Support SOC operations by enhancing detection engineering, incident response workflows, and operational metrics through AI augmentation.

Requirements:
  • Bachelor's degree in computer science, Information Security, or a related field.
  • 4-6+ years of experience in cybersecurity engineering, SOC engineering, or insider threat.
  • Demonstrated expertise in SIEM engineering and security monitoring at scale.
  • Experience integrating or developing AI/ML capabilities within security operations or detection engineering.
  • Strong understanding of the Microsoft security stack (e.g., Sentinel, Defender suite)
  • Proficiency with automation tooling and scripting languages (KQL, Python, Powershell)
  • Proficiency in API development with the goal of integrating security tooling
  • Familiarity with various log ingestion methodologies into a SIEM environment.
  • Experience in multi-tenant or MSP like environments a plus
  • Highly motivated self-starter who thrives on positively influencing the environment.

It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company's needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Benefits & Perks:
  • Company-Paid Lunch Stipend: Lunch is provided via GrubHub
  • Company-Paid Benefits: 100% Employer-Paid Medical in our High Deductible Health Plan, Dental and Vision benefits for employees and their families, 16 weeks of Paid Parental Leave, Employee Assistance Program, Life insurance, Short-Term Disability and Long-Term Disability
  • 401(k): Company will match 100% of your contributions up to 6%
  • Optional Employee-Paid Benefits: Medical insurance in our PPO plan and a variety of other benefits such as Health Savings Accounts (with Company Contribution!), Flexible Spending Accounts, Supplemental Life Insurance, Wellhub and more.
  • Time Off: 25 days of Paid Time Off plus 12 company holidays

EQUAL OPPORTUNITY EMPLOYER
NORTHMARK STRATEGIES LLC IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER. THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW. THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES.

Apply