L3 Security Platform Engineer

At Sincratek, we believe reliable technology starts with people, systems, and support working in sync.

We provide technology support and operations services designed to keep businesses running smoothly around the clock. Our teams work across service desk operations, technical support, system and alert monitoring, incident and request management, application support, user administration, and access management, delivering dependable support at every step.

If you are passionate about technology, problem-solving, delivering excellent support, and working in a collaborative environment, we would love to hear from you.

About the Role

The L3 Security Platform Engineer is responsible for advanced security monitoring, incident investigation, threat analysis, and escalation support within the Security Operations Center. This role requires strong hands-on experience in SOC operations combined with security platform administration capabilities across SIEM, endpoint detection and response, email security, cloud security, identity security, and related monitoring technologies. The analyst will lead complex investigations, tune detection use cases, support platform health and configuration activities, mentor junior analysts, and coordinate with incident response, infrastructure, and application teams to strengthen the organization’s security monitoring and response capability. The role is based on-site in Hyderabad and supports global Security Operations in a Follow-The-Sun model.

Key Responsibilities

• Lead advanced triage, investigation, and analysis of high-severity alerts and incidents across SIEM, endpoint, network, email, identity, and cloud security platforms.

• Perform deep-dive log analysis, event correlation, threat hunting, and root-cause analysis to identify attack patterns, indicators of compromise, and control gaps.

• Administer and maintain security platforms, including configuration updates, rule tuning, alert logic validation, data source onboarding, connector health checks, and access administration where applicable.

• Develop, refine, and maintain detection use cases, correlation rules, dashboards, playbooks, standard operating procedures, and response runbooks.

• Coordinate incident response activities with security engineering, infrastructure, cloud, network, identity, application, and business teams to ensure timely containment and remediation.

• Provide technical guidance, quality review, and mentoring to L1 and L2 SOC analysts, including escalation review and investigation coaching.

• Ensure accurate documentation of investigations, evidence, actions taken, lessons learned, and control recommendations in ticketing and case management systems for reporting and audit purposes.

• Support 24/7 SOC operations through structured handovers, shift support, service level adherence, and collaboration with global teams operating in a Follow-The-Sun model.

Qualifications & Experience

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related discipline, or equivalent practical experience.

• 5+ years of experience in cybersecurity operations, including hands-on SOC analyst experience with exposure to incident response, threat hunting, or detection engineering.

• Practical experience administering or supporting security platforms such as SIEM, EDR/XDR, SOAR, email security gateways, cloud security tools, vulnerability management platforms, identity security tools, or network security monitoring solutions.

• Strong understanding of security monitoring, cyber kill chain or MITRE ATT&CK techniques, incident response lifecycle, log analysis, endpoint telemetry, network protocols, authentication flows, and common attack methods.

• Ability to tune alerts, validate detection logic, assess control effectiveness, and recommend improvements to monitoring coverage and response procedures.

• Strong written and verbal communication skills, with the ability to document investigations clearly and brief technical and non-technical stakeholders.

• Working proficiency in English is required to support multinational teams and stakeholders.

• Availability to work on-site in Panama City, Panama required.

Preferred

• Professional certifications such as CompTIA Security+, CySA+, GCIA, GCIH, GCFA, CEH, SC-200, AZ-500, Microsoft Security Operations Analyst, or equivalent security operations credentials.

• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, Splunk, QRadar, CrowdStrike, Palo Alto, Fortinet, Proofpoint, Zscaler, or comparable enterprise security technologies.

• Experience onboarding log sources, maintaining connectors, building dashboards, managing alert queues, integrating SOAR workflows, or supporting security platform upgrades.

• Exposure to cloud security monitoring across Microsoft Azure, AWS, Google Cloud, or hybrid enterprise environments.

• Experience working in regulated or compliance-focused environments with strong documentation, control adherence, evidence management, and audit support expectations.

• Ability to mentor junior analysts, lead technical escalations, and contribute to continuous improvement of SOC processes, detection maturity, and operational reporting.

What We Offer

• Competitive compensation package.
• Professional growth and development opportunities.
• Exposure to international teams and technology environments.
• Collaborative and supportive company culture.
• Opportunity to work within a growing technology operations organization.
• Hands-on experience with modern systems, tools, and operational processes.

Equal Opportunity Employer

Sincratek is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applications from qualified candidates regardless of race, ethnicity, gender, age, disability, religion, sexual orientation, or background.