Sr. Swimlane SOAR Engineer | Remote, USA

This position will be fully remote and can be hired anywhere in the continental U.S. 

 As per client requirements, U.S. Citizenship is required.  

The Sr. Swimlane Engineer works within the Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. This individual will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Sr. Engineer will work closely with Management, Solution Architects, and Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients.  They will serve as a primary point of contact for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.  

As a Sr. Swimlane Engineer, you will play a pivotal role in enhancing our clients' security posture by deploying and managing client Swimlane Turbine deployments. Your expertise will help automate security workflows, streamline response actions, and integrate various tools to improve overall security operations efficiency and effectiveness. 

How you’ll make an impact 

• Take technical leadership on client projects; oversee and guide work performed by other technical staff members. 

• Assist with client onboarding, transition, and deployment of new and existing Swimlane deployments.

• Design, develop, and deploy SOAR solutions to automate security operations tasks and workflows. 

• Integrate Swimlane SOAR platform with a wide range of security tools including SIEM, endpoint protection, threat intelligence platforms, and other cybersecurity solutions. 

• Identify and explain how automation we are developing for our clients is returning their investment/adding value.

• Provide mentorship to other technical staff members.

• Provide technical assistance in scoping and other pre-sales activities .

What we're hiring for 

•  As per client requirements, U.S. Citizenship is required.  

• 6+ years of related work experience (Bachelor’s degree preferred). 

• 4+ years of technical engineering experience with Swimlane and 1+ years of technical experience with Swimlane Turbine.

• Strong understanding and experience working with application programming/scripting languages (Python, Java, Perl, PowerShell), as well as Regular Expressions. 

• Information security knowledge in one or more areas to include: Security Information and Event Management (SIEM), (preferably Splunk), end-point security products, email/phishing products, and case management/knowledge management systems such as Service NOW. 

• Experienced with multiple information security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance. 

• Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.) 

• Experience with cloud-based service architecture (AWS, Azure, GCP)

• Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc. 

• Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc.) 

• Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences 

• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions. 

• Strong interpersonal and communication skills; ability to work in a remote team environment.

• Ability to work independently with minimal direction; self-starter/self-motivated. 

• Technical writing experience such as solution documentation and root cause analysis reports.

• Possess high standard of integrity and confidentiality.  

#LI-TW1

#LI-Remote