Principal SOAR Engineer- Swimlane | Remote, USA

This position will be fully remote and can be hired anywhere in the continental U.S.  

We are seeking a highly skilled and experienced Principal Security Orchestration, Automation, and Response (SOAR) Engineer, specializing in Swimlane SOAR, to join our IT/Security Operations team. As a Senior Swimlane Engineer, you will play a pivotal role in enhancing our clients' security posture by managing client Swimlane solutions. Your expertise will help automate security workflows, streamline response actions, and integrate various tools to improve overall security operations efficiency and effectiveness. The Principal Swimlane Engineer is a member of the Advanced Fusion Center (AFC) team, and will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Principal Swimlane Engineer will work closely with client Management, Solution Architects, Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients. They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.   

Applicants should have a comprehensive understanding of security technologies, including cloud technologies (e.g. Amazon Web Services, Google Cloud Platform, Azure), have extensive experience interacting with customers and have a solid understanding of information security and networking. Providing SIEM management solutions tailored to the needs of clients. Additionally, this position acts as an escalation point for critical and complex client issues, performs configuration and testing of products, assists with the development of work processes, and trains other team members.   

How you’ll make an impact 

• Design, develop, and deploy Swimlane SOAR solutions to automate security operations tasks and workflows. 

• Integrate Swimlane SOAR platform with a wide range of security tools including SIEM, endpoint protection, threat intelligence platforms, and other cybersecurity solutions. 

• Identify and explain how automation we are building for our clients is returning their investment/adding value 

• Provide mentorship to other technical staff members 

• Provide technical assistance in scoping and other pre-sales activities 

• Take technical leadership on client projects; oversee and guide work performed by other technical staff members. 

What we're hiring for 

• U.S. Citizenship required. This position also requires a CJIS Background Check and Fingerprinting as part of the onboarding process. 

• 7+ years of related work experience (Bachelor’s degree preferred) 

• 7+ years of technical architecture experience with SIEM & SOAR  

• SOAR experience specifically with the Swimlane platform is required. 

• Experienced with multiple security concepts and methods, such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance. 

• Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.) 

• Strong understanding and experience working with application programming/scripting languages (Python, Java, Perl, PowerShell), as well as Regular Expressions. 

• Experience with cloud-based service architecture 

• Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc. 

• Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc) 

• Experience representing technical viewpoints to diverse audiences  

• Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences 

• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions. 

• Strong interpersonal and communication skills; ability to work in a team environment 

• Ability to work independently with minimal direction; self-starter/self-motivated 

• Technical writing experience 

• Possess high standard of integrity and confidentiality