Senior Cyber Defense Infrastructure Engineer (Security Tooling Operations)
Core
Operational owner for core security platforms ensuring reliable deployment, configuration, maintenance, and lifecycle management of enterprise security tooling to support threat detection and incident response.
Role type
Senior Cyber Defense Infrastructure Engineer (Security Tooling Operations)
Builds
Production-ready security platforms (EDR, SIEM, vulnerability management, cloud security) integrated with logging pipelines and operational tools.
Domain
Cybersecurity / Enterprise Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Linux/Windows systems administration, Cloud environments (AWS/Azure), System integrations, Logging and telemetry pipelines, Change/incident/problem management processes, Security tool deployment and operationalization, Platform configuration and patching, Runbook development, Vendor tool management.
Preferred skills
Large-scale regulated enterprise environment experience, NIST CSF or CIS Controls familiarity, SOC or incident response team support experience, Cloud or security certifications.
Technologies
EDR tools, SIEM platforms, Vulnerability management solutions, AWS, Azure, Linux, Windows, Cloud platforms, Identity systems, Logging pipelines.
Responsibilities
Lead post-selection deployment and operationalization of enterprise security tools; Configure, maintain, patch, and upgrade security tools; Develop monitoring, runbooks, and operational processes; Partner with incident response teams to ensure tool availability during security events; Support audits by demonstrating tooling configuration and controls; Identify opportunities to improve tooling reliability and automation.
Seniority
Senior, hands-on IC
