Security Platform Engineer
Core
Support and maintain backend security platforms (SIEM, log ingestion, forwarders) for SOC and security operations teams to ensure stability, availability, and effective data ingestion.
Role type
Security Platform Engineer (Backend/Infrastructure)
Builds
Stable, patched, and available security platforms (Splunk, Microsoft Sentinel, Tenable, LogicMonitor) for customer environments.
Domain
Cybersecurity / Security Operations / Infrastructure
Required skills
SIEM platforms (Splunk, Microsoft Sentinel), log ingestion, forwarders, collectors, integrations, troubleshooting, Windows/Linux administration, patching, change management
Preferred skills
Python, PowerShell, APIs, Tenable, LogicMonitor, scripting, automation
Responsibilities
Support and maintain backend security platforms; Troubleshoot issues across log ingestion and platform availability; Perform security platform patching and upgrades; Support customer incidents regarding SIEM/tooling degradation; Assist with onboarding and maintaining log sources; Contribute to scripting and automation initiatives; Maintain platform health across Windows, Linux, and cloud environments
Seniority
Mid-level, hands-on IC