Senior Security Platform Engineer

Job Overview

We serve as a senior member of a 24/7 global cybersecurity team, providing leadership in IT/OT environments with expertise in ICS and SCADA systems.

This role sits within our global data center cybersecurity organization and offers the opportunity to work on critical IT/OT security challenges in a highly collaborative, international environment.

Responsibilities

• Lead the administration and optimization of enterprise security platforms, including break‑fix, patching, version upgrades, and integration with broader security ecosystems.
• Direct complex security incident response efforts across endpoint protection, EDR, malware analysis, network forensics, and computer forensics to ensure rapid containment and root cause analysis.
• Design and execute advanced vulnerability assessments using automated and manual techniques, prioritizing remediation based on business risk and threat intelligence.
• Continuously monitor threat intelligence feeds and security alerts to identify emerging risks and recommend countermeasures.
• Interpret and synthesize threat reports to guide architectural improvements and validate the effectiveness of security controls.
• Partner with cross‑functional teams to develop and implement mitigation strategies, configuration baselines, and patch management frameworks.
• Champion automation initiatives to streamline incident response, threat detection, and reporting workflows using security platforms and scripting.
• Maintain and evolve a knowledge base by authoring and reviewing technical articles, playbooks, and SOPs.
• Lead post‑incident reviews, driving service recovery, documentation, and preventive measures across teams and vendors.
• Provide expert guidance on specialized security domains and technologies to ensure effective resolution of escalated incidents.
• Ensure meticulous incident logging and collaborate across internal teams, client IT environments, vendors, and carriers to expedite resolution.
• Conduct advanced data correlation and threat hunting across network traffic, email logs, malware samples, web server logs, and DNS records to uncover stealthy threats.
• Lead strategic security projects, mentor junior engineers, and contribute to the evolution of our security posture through innovation and thought leadership.
• Technologies
• AI
• Firewall
• IAM
• Network Security
• Web
• Mandatory Qualifications
• Multiple years of experience working in IT and/or Security Operations Centers.
• Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments.
• Demonstrated leadership in ICs and SCADA security integration and monitoring within critical infrastructure.
• Deep knowledge of security architecture with hands‑on experience designing and integrating multi‑layered security solutions across diverse technology stacks.
• Strong problem‑solving skills with a track record of resolving complex security challenges independently and leading cross‑functional teams through ambiguity.
• Exceptional attention to detail in high‑stakes environments, especially in threat detection, incident response, and documentation.
• Advanced analytical skills with the ability to synthesize threat intelligence, correlate multi‑source data, and produce actionable risk insights.
• Polished spoken and written communication skills in English.
• Advanced experience with security technologies such as SIEM, PAM, IAM, Pen Test, Threat Hunting, Firewall, and Proxy.
• Bachelor’s degree or equivalent in Information Technology or a related field.
• Preferred Qualifications
• Experience in a data center environment.
• Proactive customer engagement mindset with a strategic approach to anticipating security needs and influencing stakeholders.
• Proven leadership in global security teams, including collaboration, mentoring, and alignment between security operations and business objectives.
• Relevant security certifications such as Cy SA, Pen Test, CCSP, GCIH, OSCP, CISM, or CISSP.
• Relevant IT certifications such as CCNA, CCNP, RHCSA, GRID, GICSP, AZ‑500, or SC‑200 are an advantage.

Education

Bachelor’s degree or equivalent in Information Technology or a related field.

#J-18808-Ljbffr