Security Platform Engineer
New
S
SportySecurity Technology
Europe - Remote, Core working hours of 10am-3pm in your local time zoneFull-Time
SalaryA competitive salary plus individual performance-based bonuses every quarter
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonBash
Requirements
- Experience administering enterprise SIEM, XDR, or EDR platforms.
- Hands on experience with Wazuh, Trend Micro Vision One, Microsoft Defender XDR, Microsoft Sentinel, Elastic Security, Splunk, or similar platforms.
- Strong understanding of endpoint security, Windows, Linux, macOS, Active Directory, cloud environments, and network security.
- Experience tuning detection rules and reducing false positives.
- Familiarity with log collection, parsing, correlation, and security event analysis.
- Understanding of MITRE ATT&CK and common attacker techniques.
- Experience writing automation or scripting using Python, PowerShell, or Bash.
- Strong analytical and troubleshooting skills.
- Excellent documentation and communication skills.
Responsibilities
- Administer, maintain, and monitor EDR and SIEM environments.
- Tune detection rules, correlation logic, and security policies to improve detection quality and reduce false positives.
- Configure and maintain endpoint policies, agent health, log collection, and platform integrations.
- Develop and maintain dashboards, reports, alerts, and security use cases.
- Investigate noisy or ineffective detections and continuously improve alert fidelity.
- Integrate new log sources and improve visibility across endpoints, servers, cloud services, and network infrastructure.
- Convert findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into improved monitoring content.
- Support the Information Security team during security investigations by improving visibility, detections, and response workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
