Sr. Engineer - SOAR Automation | On-Site, Bangalore

Location: Bangalore, Karnataka

Time Type: Full time

Job Description

This position will be on-site reporting to our Bangalore office, M-F.
 

This team provides 24/7 support.  This role requires shift flexibility, including the ability to rotate between days, mids, and nights.  
 

At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest growing companies in a truly essential industry. In your role at Optiv, you’ll be inspired by a team of the brightest business and technical minds in cyber security. We are passionate champions for our clients and know from experience that the best solutions for our clients’ needs come from working hard together. As part of our team, your voice matters, and you will do important work that has impact, on people, businesses, and nations. Our industry and our company move fast, and you can be sure that you will always have room to learn and grow. We’re proud of our team and the important work we do to build confidence in a more connected world.

How you'll make an impact

• Experience of implementation and development of SOAR solutions like Google SecOps, Swimlane, Turbine, Cortex XSOAR, Tines, Exabeam SOAR, Splunk SOAR etc.
• The primary purpose of this role is to act as the orchestration strategist in identifying incident response activity
• where mitigating controls would be automated. This is accomplished in a four-pronged approach:
• Identify mitigating controls through repetitive manual processes within the SOC Analyst community that complies
• with client security policy and industry best practices
• In concert with Principal Analyst and Threat Hunters, within the "Proactive Hunting" process, translate complex, and non-complex
• Incident Response event patterns into an automated process mitigating control
• In coordination with SOC Operations, Data Scientists, Service Delivery Manager, and Application Development
• Engineers, produce the requirements necessary to translate manual Incident Response events into automated
• mitigating controls through the use of several industry standard platforms, research patterns to gain decision
• making criteria, and coding languages.

What we’re looking for

• BE / BTech / ME / MTech in Computer Science or technology-related degree or equivalent work experience.
• 6+ years of progressive software development or web development or security automation experience
• 5+ years of experience in security automation and development using SOAR solutions like Google SecOps, Swimlane, Cortex
• XSOAR, Tines, Exabeam SOAR, Splunk SOAR etc.
• Hands-on coding experience in the implementation of complex programming custom workflows.
• In-depth knowledge of algorithms, data structures, design patterns, and their applications.
• Solid programming background in Python, NodeJS, TypeScript, JavaScript, or other object-oriented languages.
• Strong NoSQL database and SQL knowledge including MongoDB, Postgres, or MySQL.
• Hands-on experience in cloud platforms such as AWS, Google Cloud or Azure and DevOps technologies including Kubernetes, Docker, and Terraform.
• Experience in an Agile DevOps engineering environment that effectively uses CI/CD pipelines (Jenkins, GitLab, Github).
• The candidate will most likely have spent time in every role of the SOC Operations, operating model
• Understand the computational decision making process in automating complex scenarios
• Strong collaboration skills that in turn translates efficient processes into automated decision making functions and determinations through the use of a wide range of industry standard platforms, data mining strategies, and investigative tools
• Unrivalled ability to work with highly complex, technical individuals to translate computing technology into everyday communication topics
• Ability to explain highly technical standards, and solutions to junior personnel, and senior leadership
• Comprehend complex data sets, and create own algorithms if necessary to accomplish tasks
• Experienced in writing requirements documentation for data programming solutions
• Focus is developing automation scripts to interconnect security systems using a proprietary platform that uses python code to configure automation actions
• Security background preferred
• Experience in REST APIs, Data storage
• Experience in using python in backend solutions management
• This role demands the availability during US Working Hours (5 to 2 PM – IST)
• This role is Work from Office role.
   

#LI-SK2 

What you can expect from Optiv

• A company committed to our inclusive value through our Employee Resource Groups

• Work/life balance

• Professional training resources

• Creative problem-solving and the ability to tackle unique, complex projects

• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.

• The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities.  For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.