Senior Security Solutions Engineer
Swimlane
IndiaremotePosted 1 month ago
Skill Required
Security-Solutions-EngineerSecurity-Automation-EngineerSOAR-EngineerSolutions-EngineerSecurity-Content-EngineerSenior-Security-Solutions-ArchitectSenior-Solutions-Architect-SecuritySecurity-EngineerSenior-Solutions-EngineerSenior-Cybersecurity-Solutions-ArchitectSenior-Information-Security-EngineerSenior-Cybersecurity-EngineerSenior-Principal-Security-EngineerSenior-Security-Support-EngineerSecurity EngineersecurityCloud SecurityEngineeringJavaScriptautomationITILbuildingwrittenPythondesignAgileCloudHTMLSIEMAPIsCSSandGenerative AIAIFulltime
Key highlights
- Required experience: 7+ years in software development, solutions architecture, or security automation
- Key requirement: Direct experience in a large-enterprise SOC or an MSP / MSSP
- Benefit: Training & Professional Development Opportunities
- Notable requirement: Proficiency in Python and JavaScript
Role overview
Swimlane is a rapidly growing, innovative startup providing cloud-scale, low-code security automation. They are seeking a Senior Security Solutions Engineer to design, ship, and sustain security solutions and reusable components on Swimlane Turbine for the Swimlane Marketplace, turning real SOC and managed-service workflows into productized automation including playbooks, components, case experiences, and dashboards.
Responsibilities
- Own Solutions — end-to-end Turbine packages for high-value use cases (SIEM/EDR alert triage, phishing, vulnerability operations, identity response, threat intel, case management).
- Own Components — reusable ingestion and enrichment building blocks with clean interfaces, so playbooks compose instead of being rewritten per vendor.
- Own Marketplace quality — versioned, documented, tested content that deploys cleanly across tenants.
- Translate SOC and MSP operating models into Turbine playbooks, components, apps, and dashboards that are customer-agnostic and configurable.
- Normalize vendor-specific data into common schemas (OCSF / TEDS and Turbine interfaces) using native actions, JavaScript, and Python.
- Design workflows that mix deterministic automation with AI-assisted steps — enrichment, summarization, classification — with explicit human-in-the-loop controls.
- Integrate across the security stack via connectors and APIs: SIEM, EDR/XDR, identity, threat intel, ticketing, and cloud security tools.
- Package, version, and publish Solutions and Components to the Marketplace; own docs, test cases, and release notes.
- Partner with Product, UX, Platform, QA, Sales Engineering, and Professional Services to turn field demand into content that scales.
- Raise the bar on content quality: reuse, testability, failure handling, and operability at enterprise and multi-tenant scale.
Requirements
- 7+ years in software development, solutions architecture, or security automation — with hands-on time building SOC or IR workflows, not only writing code next to a security team.
- Direct experience in a large-enterprise SOC or an MSP / MSSP, including triage, investigation, enrichment, escalation, and response.
- Proficiency in Python and JavaScript, JSON/API integrations, and transforming messy third-party payloads into reliable schemas.
- Hands-on work on at least one SOAR or security automation platform: Swimlane, Cortex XSOAR, Splunk SOAR, Tines, Torq, or equivalent.
- Working knowledge of SIEM and EDR/XDR (for example Splunk, Microsoft Sentinel, CrowdStrike, Defender, SentinelOne) and how analysts actually use them.
- Comfort with ambiguity: you can take an incomplete use case, define the workflow, and ship a maintainable solution.
- Clear written and verbal communication with both engineers and security operators.
Nice to have
- Prior Swimlane Turbine, Marketplace, or content-pack experience.
- OCSF or similar normalization work; MITRE ATT&CK fluency.
- Building or tuning AI agents / LLM-assisted SOC workflows, including guardrails and confirmation steps.
- Multi-tenant or MSSP service-delivery design.
- HTML/CSS or widget work for analyst-facing layouts and dashboards.
- Security certifications (GCIH, GCIA, CISSP) or SOAR platform certifications.
Benefits
- Competitive Benefits & Compensation
- Training & Professional Development Opportunities
- Great Company Culture
Additional details
- Reports to: Content Engineering Manager
- This is not a platform-engineering role and not a pre-sales role.
- Not a sales-engineer quota role. Not on-call SOC shift work. Not greenfield platform development.
- Headquartered in beautiful Louisville, Colorado, directly between Denver and Boulder, Swimlane's staff spans 16 countries!
- How we work: Agile delivery, high ownership, global collaboration. Success looks like Marketplace solutions and components that Professional Services and customers adopt without a rewrite — and that still look right 12 months later.
- Core values: Punch above your weight class, Be a happy innovator, Always be leveling up, Move at the speed of WOW, Have honesty and integrity in ‘all the things’.
- Originally posted on Himalayas
