{"id":926246,"url":"https://alion.io/job/swimlane-senior-security-solutions-engineer","title":"Senior Security Solutions Engineer","company":{"id":9380,"name":"Swimlane","domain":"swimlane.com","url":"https://alion.io/company/swimlane","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"JavaScript","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Tines","optional":false},{"name":"Agile","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-09-15T06:36:35Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-11-06T12:51:59Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Who we are and What we can offe r\nSwimlane is a rapidly growing, innovative startup that provides cloud-scale, low-code security automation for organizations of all industries and sizes. Our technology is relied upon by major security-forward companies around the globe and we are consistently rated as the #1 trusted low-code security automation platform. Our mission is to prevent breaches and enable\ncontinuous compliance via a low-code security automation platform that serves as the system of record for the entire security organization.Get an understanding of Swimlane here: https://www.youtube.com/watch?v=enxrAKv7FaA\nWhat’s the best thing about working at Swimlane? If you ask the team, they'll tell you it's the people. Swimlaners are innovative, collaborative and driven by the purpose of revolutionizing the way security teams automate and respond to alerts. Headquartered in beautiful Louisville, Colorado, directly between Denver and Boulder, Swimlane's staff spans 16 countries!\nSenior Security Solutions Engineer\nReports to: Content Engineering Manager\nThe role\nWe are hiring a senior builder to design, ship, and sustain security solutions and reusable components on Swimlane Turbine, published to the Swimlane Marketplace. This is not a platform-engineering role and not a pre-sales role. You will turn real SOC and managed-service workflows into productized automation: playbooks, components, case experiences, and dashboards that any enterprise or MSSP can install, configure, and run. The people who do this well have already lived the problem - building security workflows inside a large-enterprise SOC or an MSP/MSSP, then encoding that judgment into automation others can trust.\nWhat you will own\nSolutions - end-to-end Turbine packages for high-value use cases (SIEM/EDR alert triage, phishing, vulnerability operations, identity response, threat intel, case management).\nComponents - reusable ingestion and enrichment building blocks with clean interfaces, so playbooks compose instead of being rewritten per vendor.\n. Marketplace quality - versioned, documented, tested content that deploys cleanly across tenants.\nWhat you will do\nTranslate SOC and MSP operating models into Turbine playbooks, components, apps, and dashboards that are customer-agnostic and configurable.\nNormalize vendor-specific data into common schemas (OCSF / TEDS and Turbine interfaces) using native actions, JavaScript, and Python.\n. Design workflows that mix deterministic automation with AI-assisted steps - enrichment, summarization, classification - with explicit human-in-the-loop controls.\n. Integrate across the security stack via connectors and APIs: SIEM, EDR/XDR, identity, threat intel, ticketing, and cloud security tools.\nPackage, version, and publish Solutions and Components to the Marketplace; own docs, test cases, and release notes.\nPartner with Product, UX, Platform, QA, Sales Engineering, and Professional Services to turn field demand into content that scales.\nRaise the bar on content quality: reuse, testability, failure handling, and operability at enterprise and multi-tenant scale.\nWhat you bring\n7+ years in software development, solutions architecture, or security automation - with hands-on time building SOC or IR workflows, not only writing code next to a security team.\nDirect experience in a large-enterprise SOC or an MSP / MSSP, including triage, investigation, enrichment, escalation, and response.\nProficiency in Python and JavaScript, JSON/API integrations, and transforming messy third-party payloads into reliable schemas.\nHands-on work on at least one SOAR or security automation platform: Swimlane, Cortex XSOAR, Splunk SOAR, Tines, Torq, or equivalent.\nWorking knowledge of SIEM and EDR/XDR (for example Splunk, Microsoft Sentinel, CrowdStrike, Defender, SentinelOne) and how analysts actually use them.\nComfort with ambiguity: you can take an incomplete use case, define the workflow, and ship a maintainable solution.\nClear written and verbal communication with both engineers and security operators.\nNice to have\nPrior Swimlane Turbine, Marketplace, or content-pack experience. OCSF or similar normalization work; MITRE ATT&CK fluency.\nBuilding or tuning AI agents / LLM-assisted SOC workflows, including guardrails and confirmation steps.\nMulti-tenant or MSSP service-delivery design.\nHTML/CSS or widget work for analyst-facing layouts and dashboards.\nSecurity certifications (GCIH, GCIA, CISSP) or SOAR platform certifications.\nWhat this is not\nNot a sales-engineer quota role. Not on-call SOC shift work. Not greenfield platform development. You build the content layer that makes Turbine valuable on day one.\nHow we work\nAgile delivery, high ownership, global collaboration. Success looks like Marketplace solutions and components that Professional Services and customers adopt without a rewrite - and that still look right 12 months later.\nHow we work\nAgile delivery, high ownership, global collaboration. Success looks like Marketplace solutions\nand components that Professional Services and customers adopt without a rewrite - and that\nstill look right 12 months later.\nThe Perks of being a Swimlaner\nCompetitive Benefits & Compensation\nTraining & Professional Development Opportunities\nGreat Company Culture\nWe value collaboration and innovation\nHere at Swimlane, our core focus is to Automate the World of Security and we strive to represent our five core values in everything we do:\nPunch above your weight class - We make the most of our circumstances and constantly surprise and impress with our ability to deliver.\nBe a happy innovator - The hard problems are the fun problems to solve, we’re excited to take on difficult challenges and find creative solutions.\nAlways be leveling up - We are continuously improving, embracing change, and consuming information to better ourselves and each other.\nMove at the speed of WOW - We work with an extreme sense of urgency, but we never compromise quality.\nHave honesty and integrity in ‘all the things’ doing what is right for as many stakeholders as possible.\n- We make decisions with the best of intenti\nTo complete your application, please submit your resume to https://ats.rippling.com/swimlane","description_format":"text","description_chars":6202,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-15T07:25:19Z"}],"visa":[],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.731,"p_room":0.55,"age_days":51,"expected_fill_days":36,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/swimlane-senior-security-solutions-engineer","json_url":"https://alion.io/job/swimlane-senior-security-solutions-engineer.json","meta":{"generated_at":"2026-11-06T13:22:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24540,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9380},"rest":"https://alion.io/mcp/rest/get_company?id=9380"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswimlane-senior-security-solutions-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswimlane-senior-security-solutions-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswimlane-senior-security-solutions-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swimlane-senior-security-solutions-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswimlane-senior-security-solutions-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":926246}},{"tool":"search_jobs","arguments":{"company":"swimlane.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":926246},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}