Cybersecurity Platform Engineer
About The Position
The Cyber Platform Engineer is responsible for designing, deploying, operating, and continuously optimizing enterprise security platforms that support threat detection, response, and vulnerability management. The role serves as a technical authority for CrowdStrike and a secondary resource for Tenable and Stellar Cyber, ensuring the platforms are properly integrated, tuned, and delivering high-fidelity security outcomes. The position works closely with CyberOps analysts, incident responders, and security leadership to translate business and risk requirements into scalable, reliable security platform capabilities.
Requirements
- Hands-on experience administering CrowdStrike Falcon.
- Hands-on experience with Tenable, including Tenable.io or Nessus.
- Hands-on experience with Stellar Cyber.
- Strong understanding of endpoint, network, identity, and cloud security telemetry.
- Familiarity with the MITRE ATT&CK framework and incident response workflows.
Nice To Haves
- Experience with additional security platforms such as SIEM, SOAR, EDR, or NDR.
- Scripting or automation experience with PowerShell, Python, or APIs.
- Cloud security experience with Azure, AWS, or GCP.
- Relevant security certifications, such as CrowdStrike, Tenable, GIAC, or equivalent.
Responsibilities
- Own the configuration, health, and ongoing optimization of CrowdStrike Falcon and other CrowdStrike product lines.
- Ensure platform availability, data integrity, and correct telemetry ingestion across endpoint, network, cloud, and identity sources.
- Serve as the escalation point for complex platform issues affecting detection, response, or vulnerability workflows.
- Provide secondary support for Tenable and Stellar Cyber platforms.
- Optimize CrowdStrike policies, prevention settings, and detections to balance protection and operational impact.
- Support incident investigations through platform expertise and advanced telemetry analysis.
- Integrate security platforms with SIEM, SOAR, ticketing, and reporting systems.
- Support API-based integrations and automation to improve operational efficiency.
- Validate and onboard new client installations and log sources.
- Develop and maintain platform standards, runbooks, and operational documentation.
- Identify gaps in telemetry, coverage, or detection logic and drive improvements.
- Stay current with platform feature releases and recommend enhancements aligned with threat trends.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
