Cybersecurity Platform Engineer

About the role

The Cybersecurity Platform Engineer is responsible for the maintenance of all platform services under this Contract. The platform engineer shall review, optimise, configure, maintain and manage the security platforms under the scope of the Contractor such as Azure Sentinel services and SOAR. The role's responsibility includes but is not limited to creating and maintaining SOAR playbooks, cloud subscription and project onboarding and offboarding.

Core Responsibilities:

• Design and implement playbooks and workflows;
• Develop KQL queries and SOAR capabilities;
• Create custom integrations and response automation;
• Lead data source integration;
• Configure connectors and log parsing rules;
• Optimize log collection and retention;
• Build custom workbooks and dashboards;
• Develop detection rules and hunting queries;
• Perform operational and executive reporting;
• Provide architectural guidance;
• Manage performance optimization; and
• Document procedures and train team members.

Core Requirements:

• A minimum of THREE (3) years of relevant experience in cybersecurity platform management, securityinfrastructure operations, or related technical disciplines;
• Hands-on experience in deploying, supporting, and maintaining cybersecurity platforms, including troubleshooting techniques and use of diagnostic tools;
• Scripting and coding proficiency in Python, PowerShell, Bash, or similar programming languages forautomation and platform management;
• Strong knowledge of Windows and Linux operating systems, networking concepts and protocols, and cybersecurity frameworks;
• Familiarity with cloud platforms such as AWS, Azure, or Google Cloud Platform and their securityservices;
• Professional qualification in information security such as CISSP, CISM, CEH, or equivalent cybersecuritycredential is preferred; and
• Strong analytical skills, excellent communication abilities, and advanced problem-solving capabilities in cybersecurity platform environments.