Sr. Swimlane Turbine Engineer

 As per client requirements, U.S. Citizenship is required.  

Optiv is seeking a Sr. Swimlane Turbine Engineer to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base. Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals.The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams: Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.

The Sr. Swimlane Turbine Engineer will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Sr. Swimlane Turbine Engineer will work closely with Management, Solution Architects, Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients.  They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution. 

How you’ll make an impact

• Enhance clients' security posture by deploying and managing client Swimlane Turbine deployments.

• Automate security workflows, streamline response actions, and integrate various tools to improve overall security operations efficiency and effectiveness. 

• Take technical leadership on client projects; oversee and guide work performed by other technical staff members. 

• Assist with client onboarding, transition, and deployment of new and existing Swimlane deployments.

• Design, develop, and deploy SOAR solutions to automate security operations tasks and workflows. 

• Integrate Swimlane SOAR platform with a wide range of security tools including SIEM, endpoint protection, threat intelligence platforms, and other cybersecurity solutions. 

• Identify and explain how automation we are developing for our clients is returning their investment/adding value.

• Provide mentorship to other technical staff members.

• Provide technical assistance in scoping and other pre-sales activities.

What we're looking for

• As per client requirements, U.S. Citizenship is required.  

• Bachelor's Degree in Information Technology, Information Security/Assurance, Engineering or related field of study; or at least 6 years of related experience and/or training; or equivalent combination of education and experience required 

• 4-7 years of experience with managed Security Services or Information Security experience required, administration, configuration and management required, Enterprise Security administration required

• 4+ years of technical engineering experience with Swimlane and 1+ years of technical experience with Swimlane Turbine.

• Strong understanding and experience working with application programming/scripting languages (Python, Java, Perl, PowerShell), as well as Regular Expressions. 

• Information security knowledge in one or more areas to include: Security Information and Event Management (SIEM), (preferably Splunk), end-point security products, email/phishing products, and case management/knowledge management systems such as ServiceNow. 

• Experienced with multiple information security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance. 

• Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.) 

• Experience with cloud-based service architecture (AWS, Azure, GCP)

• Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc. 

• Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc.) 

• Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences 

• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions. 

• Strong interpersonal and communication skills; ability to work in a remote team environment.

• Ability to work independently with minimal direction; self-starter/self-motivated. 

• Technical writing experience such as solution documentation and root cause analysis reports.

• Possess high standard of integrity and confidentiality.  

• Security+, CISSP, GCIH, GCIA, GPEN, CEH and or other industry certifications preferred.