The Senior Security Platform Engineer (m/f/d), is an advanced subject matter expert, responsible for facilitating problem resolution and mentoring for the overall Global Data Centers Office of Information Security (GDC-OIS) team. This role is critical in improving, developing and maintaining IT/OT vulnerability management programs and processes.
This role performs and leads important tasks specialized at threat hunting, SIEM/SOAR, Network Security and other operational security tasks such as performance and availability monitoring, log monitoring, security incident detection and response, security event reporting, and content maintenance (tuning).
Key Responsibilities
- Serves as a senior member of a 24/7 global GDC Cybersecurity team, providing leadership in IT/OT environments with required expertise in ICy and SCADA systems.
- Leads the administration and optimization of enterprise security platforms, overseeing lifecycle management including break‑fix, patching, version upgrades, and integration with broader security ecosystems.
- Directs complex security incident response efforts across multiple vectors—endpoint protection, EDR, malware analysis, network and computer forensics—ensuring rapid containment and root cause analysis.
- Designs and executes advanced vulnerability assessments using both automated and manual techniques; collaborates with stakeholders to prioritize remediation based on business risk and threat intelligence.
- Oversees continuous monitoring of threat intelligence feeds and security alerts, proactively identifying emerging risks and recommending strategic countermeasures.
- Interprets and synthesizes threat reports to guide architectural improvements and validate the effectiveness of current security controls.
- Partners with cross‑functional teams to develop and implement enterprise‑wide mitigation strategies, configuration baselines, and patch management frameworks.
- Champions automation initiatives to streamline incident response, threat detection, and reporting workflows, leveraging available security platforms and scripting.
- Maintains and evolves the knowledge base by authoring and reviewing technical articles, playbooks, and SOPs to ensure consistency and operational excellence.
- Leads post‑incident reviews, driving service recovery, documentation, and implementation of preventive measures across teams and vendors.
- Provides expert‑level guidance on specialized security domains and technologies, ensuring comprehensive and efficient resolution of escalated incidents.
- Ensures meticulous incident logging and fosters collaboration across internal teams, client IT environments, vendors, and carriers to expedite resolution.
- Conducts advanced data correlation and threat hunting across diverse sources—network traffic, email logs, malware samples, web server logs, DNS records—to uncover stealthy threats and improve detection capabilities.
- Leads strategic security projects, mentors junior engineers, and contributes to the evolution of the organization’s security posture through innovation and thought leadership.
Knowledge & Attributes
- Multiple years experience of working in IT and/or Security Operation centers required. Experience in a Data Center environment an added plus.
- Advanced expertise in architecting, implementing, and optimizing SIEM and security platforms across hybrid environments. Demonstrated leadership in ICy and SCADA security integration and monitoring within critical infrastructure.
- Deep knowledge on security architecture, with hands‑on experience designing and integrating multi‑layered security solutions across diverse technology stacks.
- Strategic customer engagement mindset with a proactive approach to anticipating security needs, influencing stakeholders, and driving continuous improvement in service delivery.
- Recognized as a strategic problem solver with a track record of resolving complex security challenges independently and leading cross‑functional teams through ambiguity.
- Exceptional attention to detail in high‑stakes environments, ensuring precision in threat detection, incident response, and documentation that supports audit and compliance.
- Advanced analytical acumen with the ability to synthesize threat intelligence, correlate multi‑source data, and drive actionable insights for risk mitigation.
- Polished spoken and written communication skills with English as the preferred language.
- Proven leadership in global security teams, fostering collaboration across departments, mentoring junior engineers, and driving alignment between security operations and business objectives.
Academic Qualifications & Certifications
- Bachelor's degree or equivalent in Information Technology or related field.
- Relevant level of Security certifications such as CySA+, PenTest+, CCSP, GCIH, OSCP, CISM, CISSP etc. preferred.
- Relevant level of IT certifications such as CCNA, CCNP, RHCSA, GRID, GICSP, AZ-500, SC-200, etc. will be added advantage.
- Advanced experience in Security technologies like (SIEM, PAM, IAM, PenTest, Threat Hunting, Firewall, Proxy etc.) preferably within a global IT services organization.
Who we are
As the third largest data center provider, we operate over 150 data centers in more than 20 countries and regions. We understand that every business – large and small – has its own unique needs and goals. We offer local‑to‑global data center expertise, aligned with our connected platform of AI‑ready data centers to create solutions that enable our clients to seamlessly scale their digital businesses, anywhere and anytime.
#J-18808-Ljbffr