Solution Engineer

About Cyware

Cyware delivers an innovative approach to cybersecurity that unifies threat intelligence, automation, threat response, and vulnerability management with data insights gleaned from assets, users, malware, attackers, and vulnerabilities. Cyware’s Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security teams. Cyware is widely deployed by enterprises, government agencies, and MSSPs, and is the leading threat intelligence sharing platform for global ISACs and CERTs.

Your next opportunity starts here

More on Cyware: (www.cyware.com)

Built and designed by SecOps practitioners and cybersecurity leaders, Cyware offers multiple technologies within its Cyber Fusion platform, including advanced threat intelligence solutions (TIP) for large and small security teams, vendor-agnostic security automation (SOAR), and purpose-built security case management. As a result, organizations can increase speed and accuracy while reducing costs and analyst burnout. Cyware's Virtual Cyber Fusion solutions make secure collaboration, information sharing, and enhanced threat visibility a reality for enterprises, sharing communities (ISAC/ISAO), MSSPs, and government agencies of all sizes and needs.

What You Will Do:

• Serve as the security solution engineer responsible for the planning and design of both on-prem and cloud-based infrastructure solutions and complex POCs simulating customer environments.
• Lead research, development, and adherence to application standards and patterns, application portfolio strategy for solutions, security tools integrations, and infrastructure.
• Serve as a Lead Security Architect on project teams (including users, developers), to plan, coordinate, analyze, design, review, and implement Cyware’s Software.
• Participate in the design review process and support the overall Enterprise Architecture Management process.
• Support Sales Engineers with solution selling into prospect account base and lead planning, preparation, and execution on strategic deals.
• Lead the deployment of Cyware products in the customer’s environment
• Establish and maintain effective working relationships with clients; Track industry developments and trends on products, services, and relevant information about legacy, existing, and emerging technologies
• Understand customer pain points and requirements, and propose appropriate solutions
• Work with QA and development teams to troubleshoot and resolve complex product issues
• Develop Solution Architecture Models and Documentation (key written project deliverable). Oversee and approve the creation of architecture documentation.
• Act as a communication channel between the market needs and the development teams for Cyware product enhancements and roadmap creation
• Lead and deliver impactful demos and presentations to clearly communicate the uniqueness of the value proposition
• Understand the customer use cases and map it to the Cyware products and deliver the end to end working solution to the customer.
• Work with the customer to understand the new requirements during the implementation and provide appropriate solutions within the product, or suggest new requirements of the product to the engineering team.

What Are We Looking For:

• Bachelor’s Degree and 4+ years of progressive experience in a combination of development, design, infrastructure, and/or related IT and Security disciplines.
• Must have at least 2 years of direct infrastructure, system, application, and/or other security solution architecture experience.
• Possess an understanding of both the Incident Response Lifecycle and Threat Intelligence Lifecycle Process.
• Exposure to multiple, diverse security integrations and automation (SOAR), security tools (SIEM, EDR, UEBA, TIP, CMDB, NAC, etc.), and processing environments, including cloud and SaaS technologies.
• Experience with SIEM Vendors/Tooling such as: Splunk, QRadar, Arcsight, RSA, Exabeam, etc.
• Experience with SOAR, IR Vendors/Tooling such as: XSOAR, Phantom, Siemplify, IBM Resilient, Swimlane.
• Experience with Threat Intel Vendors/Tooling such as: MISP, Anomali Threatstream, ThreatConnect, Threat Quotient.
• Experience with TI Feeds, Enrichment Vendors/Tooling such as: VirusTotal, FireEye, Recorded Future, Hybrid Analysis.
• Experience with EDR, Other Vendors/Tooling such as: Tanium, CarbonBlack, CrowdStrike, Symantec, TrendMicro.
• Familiarity in scripting and object-oriented programming with Python, other programming languages, and REST APIs is required.
• Strong experience in security solution design principles and practices, system development methodologies, and software life cycles.
• Experience leading security teams is a plus, especially hands-on and able to coach teams on new technologies and practices.
• Understanding or contribution to any open source projects in domains like SOC, Incident Response, Threat Intelligence, Threat Hunting, etc.
• Strong understanding of the enterprise network architecture, operating system concepts and IT Security.
• Experience in handling multiple projects, showcasing total ownership of the technical deliverables