Cybersecurity Platform Engineer

About the role

The Cyber Platform Engineer is responsible for the design, deployment, operation, and continuous optimization of enterprise security platforms that support threat detection, response, and vulnerability management. This role serves as a technical authority for CrowdStrike, and a secondary resource for Tenable and Stellar Cyber, ensuring these platforms are correctly integrated, tuned, and delivering high-fidelity security outcomes.

The position works closely with CyberOps analysts, incident responders, and security leadership to translate business and risk requirements into scalable, reliable security platform capabilities.

What you'll do

CyberOps Platform Ownership

•       Own the configuration, health, and ongoing optimization of CrowdStrike Falcon and other CrowdStrike product lines.

•       Ensure platform availability, data integrity, and correct telemetry ingestion across endpoint, network, cloud, and identity sources.

•       Act as the escalation point for complex platform issues impacting detection, response, or vulnerability workflows.

•       Be a secondary resource for Tenable and Stellar Cyber platforms.

Threat Detection & Response Enablement

•       Optimize CrowdStrike policies, prevention settings, and detections to balance protection and operational impact.

•       Support incident investigations by providing deep platform expertise and advanced telemetry analysis.

Platform Integration & Automation

•       Integrate security platforms with SIEM, SOAR, ticketing, and reporting systems.

•       Support API-based integrations and automation to improve operational efficiency.

•       Validate and onboard new client installations and log sources.

Operational Excellence & Continuous Improvement

•       Develop and maintain platform standards, runbooks, and operational documentation.

•       Identify gaps in telemetry, coverage, or detection logic and drive improvements.

•       Stay current with platform feature releases and recommend enhancements aligned to threat trends.

Qualifications

Required

•       Hands-on experience administering CrowdStrike Falcon.

•       Hands-on experience with Tenable (Tenable.io, Nessus).

•       Hands-on experience with Stellar Cyber.

•       Strong understanding of endpoint, network, identity, and cloud security telemetry.

•       Familiarity with the MITRE ATT&CK framework and incident response workflows.

Preferred

•       Experience with additional security platforms such as SIEM, SOAR, EDR, or NDR.

•       Scripting or automation experience (PowerShell, Python, APIs).

•       Cloud security experience (Azure, AWS, or GCP).

•       Relevant security certifications (CrowdStrike, Tenable, GIAC, or equivalent).

What Success Looks Like

•       Security platforms are stable, fully integrated, and delivering high-quality detections.

•       CyberOps analysts receive actionable alerts with reduced noise.

•       Vulnerability data is accurate, prioritized, and trusted by stakeholders.

•       Leadership has confidence in platform coverage and security visibility.