Role Overview
We are looking for a
hands-on Security Platform Engineer to deploy, manage, and continuously improve
the security infrastructure that underpins our MXDR / MSSP operations. The role
covers the full stack from endpoint and network security to SIEM engineering
and detection engineering and is suited for someone who is equally comfortable
hardening a Windows or Linux server, tuning firewall rules, and building
detection logic in a SIEM.
The ideal candidate will
have strong expertise across SIEM platforms, cloud and network security, zero
trust architecture, and automation, with the ability to lead engineering
initiatives and deliver production-grade security solutions.
Key Responsibilities
– Deploy
and administer SIEM platforms, including designing and delivering solutions to
customers.
– Own the log onboarding lifecycle – log source integration,
parsing, normalization, enrichment, and storage optimization across
multi-tenant environments.
– Deliver and Manage EDR and XDR platforms include deployment,
policy configuration, agent management, and health monitoring.
– Participate
in customer workshops, architecture reviews, and prepare HLD and LLD documents
for finalized architecture.
– Support
pre-sales teams in solution, technical discussions, and proposal responses
– Build
and maintain detection content - correlation rules, use cases, and UEBA models
aligned to MITRE ATT&CK
– Develop and maintain SOAR playbooks for automated alert triage,
containment, and response workflows.
– Administer and tune DLP policies; investigate DLP incidents and
work with business teams to reduce false positives while protecting sensitive
data.
– Deploy, harden, and maintain security controls across Windows
and Linux environments, including patch management, OS-level hardening, and
access control.
– Deploy, manage and administer firewall platforms (NGFW) -
including policy creation, rule review, traffic analysis, and periodic audits.
– Configure and support VPN solutions for secure remote and
site-to-site connectivity.
– Extend security controls to cloud environments (AWS, Azure, GCP)
including cloud-native security services, IAM governance, and network security
groups.
– Deploy and administer any IAM Solution to manager privileged
accounts and access policies
– Support
Zero Trust and ZTNA implementations for secure application access
– Monitor
platform health, manage SLAs, and drive capacity and cost-efficiency
improvements
– Maintain
engineering run books, SOPs, and platform documentation.
– Write
and maintain automation scripts (Python, REST APIs) to streamline platform
operations, integrations, and reporting
What We’re Looking For:
– Experience working in an MSSP & MXDR operational
environment.
– 5+ years of hands-on experience in security infrastructure and
platform engineering.
– Proven experience deploying and administering firewall platforms
(NGFW) and DLP solutions in enterprise environments.
– Hands-on SIEM Deployment and engineering experience with at
least two platforms (Wazuh, Sentinel, Securonix, QRadar, CrowdStrike SIEM, or
Chronicle).
– Experience deploying and managing any of EDR/XDR platforms —
SentinelOne, CrowdStrike Falcon, or Microsoft Defender.
– Solid detection engineering skills - writing correlation rules,
use cases, and tuning alerts based on MITRE ATT&CK.
– Scripting ability in Python or equivalent for automation and
platform integration tasks.
– Familiarity with SOAR platforms and incident response automation
– Understanding of cloud security fundamentals across AWS, Azure,
or GCP.
– Having relevant cloud security (Azure, AWS, GCP) and tool
expertise certifications will be an added advantage
Key Competencies
- Strong problem-solving and analytical
thinking
- Ability to lead engineering initiatives and
mentor teams
- Excellent communication and stakeholder
management skills
- Passion for automation, innovation, and
continuous improvement
