Lead Analyst, Digital Security

About the role

Play a major role in the Digital Security Team as a Cybersecurity Platform management Engineer, managing day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.

Key responsibilities

• Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms
• Monitor platform health, service availability, performance, and capacity utilization
• Perform proactive platform maintenance, system tuning, and health checks
• Support platform deployment, upgrades, migrations, and patch management activities
• Design, implement, and maintain integrations between security platforms and enterprise systems
• Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning
• Support onboarding of new data sources, use cases, and security technologies
• Create and maintain technical documentation, operational manual, and standard operating procedure
• Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues
• Coordinate with internal teams, vendors, and external partners to resolve complex technical problems

About you

• At least 3-4 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations
• Experience supporting enterprise-scale security platforms in production environments
• Experience working within Incident, Problem, and Change Management processes
• Hands-on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred
• Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR
• Understanding of security monitoring architecture and log management concepts
• Strong knowledge of Linux and Windows administration
• Experience with Microsoft Azure services and cloud operations
• Hands-on Kubernetes (K8S) administration and troubleshooting experience
• Experience in Python and/or PowerShell scripting