Optiv · Kansas City
Other
This position will be fully remote and can be hired anywhere in the continental U.S.
As per client requirements, U.S. Citizenship is required.
Optiv is seeking a Sr. Swimlane Turbine Engineer to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base. Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals. The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams: Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.
The Sr. Swimlane Turbine Engineer will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Sr. Swimlane Turbine Engineer will work closely with Management, Solution Architects, Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients. They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.
How you’ll make an impact
Enhance clients' security posture by deploying and managing client Swimlane Turbine deployments.
Automate security workflows, streamline response actions, and integrate various tools to improve overall security operations efficiency and effectiveness.
Take technical leadership on client projects; oversee and guide work performed by other technical staff members.
Assist with client onboarding, transition, and deployment of new and existing Swimlane deployments.
Design, develop, and deploy SOAR solutions to automate security operations tasks and workflows.
Integrate Swimlane SOAR platform with a wide range of security tools including SIEM, endpoint protection, threat intelligence platforms, and other cybersecurity solutions.
Identify and explain how automation we are developing for our clients is returning their investment/adding value.
Provide mentorship to other technical staff members.
Provide technical assistance in scoping and other pre-sales activities.
What we're looking for
As per client requirements, U.S. Citizenship is required.
Bachelor's Degree in Information Technology, Information Security/Assurance, Engineering or related field of study; or at least 6 years of related experience and/or training; or equivalent combination of education and experience required
4-7 years of experience with managed Security Services or Information Security experience required, administration, configuration and management required, Enterprise Security administration required
4+ years of technical engineering experience with Swimlane and 1+ years of technical experience with Swimlane Turbine.
Strong understanding and experience working with application programming/scripting languages (Python, Java, Perl, PowerShell), as well as Regular Expressions.
Information security knowledge in one or more areas to include: Security Information and Event Management (SIEM), (preferably Splunk), end-point security products, email/phishing products, and case management/knowledge management systems such as ServiceNow.
Experienced with multiple information security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.
Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.)
Experience with cloud-based service architecture (AWS, Azure, GCP)
Understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, GDPR, etc.
Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc.)
Strong written and presentational skills; ability to clearly communicate complex messages to a variety of audiences
Experience with enterprise architecture and working as part of a cross-functional team to implement solutions.
Strong interpersonal and communication skills; ability to work in a remote team environment.
Ability to work independently with minimal direction; self-starter/self-motivated.
Technical writing experience such as solution documentation and root cause analysis reports.
Possess high standard of integrity and confidentiality.
Security+, CISSP, GCIH, GCIA, GPEN, CEH and or other industry certifications preferred.
#LI-TW1
#LI-Remote
What you can expect from Optiv
A company committed to our inclusive value through our Employee Resource Groups
Work/life balance
Professional training resources
Creative problem-solving and the ability to tackle unique, complex projects
Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
The ability and technology necessary to productively work remotely/from home (where applicable)
EEO Statement
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.