Automation Engineer

Do you have a strong automation background, are passionate and knowledgeable about cybersecurity, love to learn the latest technology and move into AI, and love to work with customers to solve their issues and add immense value for them? In this position, you will help our customers improve and automate their processes to combat security threats and automate everything. Your day-to-day efforts would include:

Installing, configuring, and deploying the Swimlane Platform

Developing and implementing Security Operations Center / Incident Response & Remediation Playbooks

Developing new integrations with 3rd party systems leveraging Python, JavaScript, and YAML

Assisting with advanced architecture design for non-standard deployments

Contributing to the Swimlane Community to answer customer/prospect questions, create relevant content, and facilitate broader security automation and orchestration adoption

Requirements:

Bachelors degree in Computer Science, Information Technology, Engineering, or relevant field. Year for year of relevant work experience may be substituted for the degree

2+ years of experience in Professional Services at a security vendor, SOC/IR experience, federal Cyber Protection Team experience or a combination of the three

Experience with Python and RESTful APIs

Demonstrated experience working in Security Operations Centers (SOCs) and Incident Response (IR) processes and procedures

Automation experience a big plus

Experience with AKS/EKS/GCP and On-Prem Infrastructure (Management & Provisioning)

Ability to quickly grasp complex technical concepts and make them easily understandable verbally, in writing, and designing supporting network diagrams/illustrations as necessary

A strong understanding of modern cybersecurity technologies and methodologies, including:

Deploying and integrating such platforms

Consulting on best-practices for SOC/IR functions

Developing and implementing automation and orchestration capabilities to streamline operations

Hand-on experience with one or more of the following types of technologies: SIEM, IAM, Firewalls/Proxy, Threat Intelligence Platforms, Malware Sandboxing

Team player that works well in collaborative situations and autonomous environments.