Position Overview
We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.
Key Responsibilities
· Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.
· Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.
· Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.
· Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.
· Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.
· Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.
· Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.
· Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.
· Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.
· Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.
· Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.
· Document processes, procedures,and configurations for knowledge sharing and compliance purposes.
Required Qualifications
· Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.
· Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.
· Familiarity with FortiSOAR forsecurity orchestration, automation, and response.
· Experience working with OrcaSecurity or similar cloud security posture management tools.
· Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.
· Strong understanding ofcybersecurity principles, threat detection, and incident response processes.
· Ability to troubleshoot complexsecurity platform issues and propose effective solutions.
· Excellent documentation,communication, and collaboration skills.
Preferred Qualifications
· Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.
· Experience with scripting orautomation tools to streamline security operations.
· Familiarity with regulatorycompliance frameworks and audit requirements.
· Bachelor’s degree in ComputerScience, Information Security, or a related field.
