Security Platform Engineer

Stack

Responsibilities

• ▹Administer, maintain and monitor EDR and SIEM environments
• ▹Tune detection rules, correlation logic and security policies
• ▹Configure endpoint policies, agent health, log collection and integrations
• ▹Develop dashboards, reports, alerts and security use cases
• ▹Investigate noisy or ineffective detections
• ▹Integrate new log sources and improve visibility across systems
• ▹Convert incident, threat intel and vulnerability findings into monitoring content
• ▹Monitor platform health, storage, agent connectivity and licensing
• ▹Support the Information Security team during investigations
• ▹Onboard new systems into EDR and SIEM with Infrastructure and IT teams
• ▹Produce operational documentation and runbooks

Requirements

• ▹Experience administering enterprise SIEM, XDR or EDR platforms
• ▹Hands-on experience with Wazuh, Trend Micro Vision One, Microsoft Defender XDR/Sentinel, Elastic Security, Splunk or similar
• ▹Strong understanding of endpoint security, Windows, Linux, macOS, Active Directory, cloud and network security
• ▹Experience tuning detection rules and reducing false positives
• ▹Familiarity with log collection, parsing, correlation and event analysis
• ▹Understanding of MITRE ATT&CK and common attacker techniques
• ▹Experience writing automation or scripting in Python, PowerShell or Bash

Soft skills

What we offer

• ▹Remote-first company
• ▹Competitive salary plus quarterly performance-based bonuses
• ▹28 days paid annual leave
• ▹Core working hours 10am-3pm local time with flexibility
• ▹Referral and flash bonuses
• ▹Top-of-the-line equipment
• ▹Annual company retreats

About the company

Sporty Group is a remote-first company focused on strengthening security monitoring and detection capability.