Automation Engineer
job description
Do you have a strong automation background, are passionate and knowledgeable about cybersecurity, love to learn the latest technology and move into AI, and love to work with customers to solve their issues and add immense value for them? In this position, you will help our customers improve and automate their processes to combat security threats and automate everything. Your day-to-day efforts would include:
Installing, configuring, and deploying the Swimlane Platform
Developing and implementing Security Operations Center / Incident Response &
Remediation Playbooks
Developing new integrations with 3rd party systems leveraging Python, JavaScript, and YAML
Assisting with advanced architecture design for non-standard deployments
Contributing to the Swimlane Community to answer customer/prospect questions, create relevant content, and facilitate broader security automation and orchestration adoption
Requirements:
Bachelors degree in Computer Science, Information Technology, Engineering, or relevant field. Year for year of relevant work experience may be substituted for the degree
2+ years of experience in Professional Services at a security vendor, SOC/IR experience, federal Cyber Protection Team experience or a combination of the three
Experience with Python and RESTful APIs
Demonstrated experience working in Security Operations Centers (SOCs) and Incident Response (IR) processes and procedures
Automation experience a big plus
Experience with AKS/EKS/GCP and On-Prem Infrastructure (Management &
Provisioning)
Ability to quickly grasp complex technical concepts and make them easily understandable verbally, in writing, and designing supporting network diagrams/illustrations as necessary
A strong understanding of modern cybersecurity technologies and methodologies, including:
Deploying and integrating such platforms
Consulting on best-practices for SOC/IR functions
Developing and implementing automation and orchestration capabilities to streamline operations
Hand-on experience with one or more of the following types of technologies:
SIEM, IAM, Firewalls/Proxy, Threat Intelligence Platforms, Malware Sandboxing
Team player that works well in collaborative situations and autonomous environments.