Solutions Architect (SOC Analysis)

Recorded Future - Somerville, MA

Full-time - Mid Level

Somerville, MA

Publishing Industries

About the position

As a Solutions Architect at Recorded Future, you will play a pivotal role in shaping the future of cybersecurity by helping clients leverage our cutting-edge threat intelligence solutions. Your primary responsibility will be to identify, develop, and deliver consulting services as part of the Solution Architecture team within the Professional Services organization. This involves working closely with customers to design offerings that enhance their Security Operations workflows, utilizing internal frameworks and methodologies. You will have the opportunity to engage with the Recorded Future API and various data sets, such as risk rules and evidence details, to build out and implement use cases and playbooks for Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) systems. In this role, you will conduct design and implementation workshops, capturing requirements and illustrating workflows to build a solid foundation for design and data flow. Understanding the customer's needs in areas such as Incident Response, Threat Intelligence, and Vulnerability Management will be crucial. You will drive the development of cybersecurity use cases and implement custom solutions across diverse client architectures, applications, and tools, all while managing multiple projects in a dynamic environment. Your ability to communicate effectively will be essential in gathering requirements and providing tailored solutions that help organizations track information in real-time and prevent cyber attacks and breaches. As you progress in this role, you will assist with client discovery workshops, gather details, and work with lead architects on architecture reviews. You will gain expertise in key integrations with platforms like Splunk, Palo Alto XSOAR, ServiceNow, and others, contributing significantly to the design and delivery of solutions. Over time, you will take on more responsibility, leading client calls and delivering consultative recommendations on how to optimally operationalize Recorded Future data within client environments. Your journey will culminate in leading advanced services, including use case development and integration strategies for large enterprise clients.

Responsibilities

• Provide Design and Implementation workshops and deliverables of Recorded Future Threat Intelligence implementation and best uses in a customer environment.
• Capture requirements, illustrate described workflows, and build the foundation of a design and data flow.
• Understand the customer's workflow and needs in Incident Response, Threat Intelligence, and Vulnerability Management.
• Drive customers' cybersecurity use cases and aid in new use case development.
• Scope and implement custom solutions across a variety of client architectures, applications, and tools while leveraging the Recorded Future API.
• Manage multiple projects in a dynamic, fast-paced environment, meeting tight deadlines and providing flexibility of schedule with customers primarily in the United States.
• Create new use cases and playbooks, tuning and troubleshooting in a customer's environment with assistance from engineering.

Requirements

• 2-plus years of relevant work experience in Cybersecurity, Threat Intelligence, or Security Operations experience.
• 2-plus years of relevant customer-facing experience, especially in engineering or consulting.
• Experience with SIEMs and other security tools: TIPs, Incident Management, Vulnerability Management, SOAR, EDR, and Automation.
• Tool experience in one or more of the following products: Palo Alto XSOAR, Splunk SOAR, Swimlane, Rapid7, ServiceNow SecOps / Vuln / TI.
• Ability to train clients on how to utilize Recorded Future's APIs and Integrations.
• Experience with Python, JSON, or RESTful APIs is a plus.
• Ability to work independently and proactively manage assigned client engagements and tasks from start to completion.
• The hunger and drive to succeed in a startup environment.

Nice-to-haves

• Experience with additional security tools and platforms.
• Familiarity with cloud security solutions and practices.

Benefits

• Competitive compensation including stock options.
• Full range of benefits including health insurance, dental insurance, and vision insurance.
• Commitment to professional development and social responsibility.
• A unique work environment with ambitious colleagues.
• Access to top technology and resources.