- Develop connectors for SIEM, EDR, SOAR, cloud security, identity, and threat intelligence platforms.
- Build services that retrieve security telemetry, enrich alerts with context, and supply data to investigation workflows.
- Design integrations to handle rate limits, pagination, retries, timeouts, schema changes, and partial failures across third-party APIs.
- Apply authentication, authorization, credential management, tenant isolation, and audit logging.
- Write automated tests, instrument services, monitor performance, and troubleshoot API and integration issues.
- Partner with product and security experts, contribute to architecture decisions, review code, and mentor fellow engineers.
- Make practical tradeoffs, communicate risks, and deliver maintainable improvements.