Security Platform Engineer（远程职位）

这条招聘信息来自 Sporty Group，岗位是 Security Platform Engineer。职位属于「IT 与编程」类别，完全远程。公司不限制候选人的居住地，在任何地方都可以申请。

招聘信息单独点名了 Python，也就是说，正是这一项工具的使用经验会成为决定因素。

公司没有公布具体数字，这一项会在面试时谈定。对工作时间，招聘信息没有提出任何条件。

这个职位通过了自动核查：凡是要求外国工作许可、签证担保、特定国籍，或者必须居住在指定国家的招聘信息，都不会进入列表。

About the role Strengthen Sporty’s security monitoring and detection capability by managing, tuning, and continuously improving EDR and SIEM platforms. Ensure security alerts are accurate, actionable, and provide reliable visibility across endpoints, servers, cloud infrastructure, and corporate systems. What you'll be doing

* Administer, maintain, and monitor EDR and SIEM environments.

* Tune detection rules, correlation logic, and security policies to improve detection quality and reduce false positives.

* Configure and maintain endpoint policies, agent health, log collection, and platform integrations.

* Develop and maintain dashboards, reports, alerts, and security use cases.

* Investigate noisy or ineffective detections and continuously improve alert fidelity.

* Validate that endpoint protection, log collection, and response capabilities operate as expected.

* Integrate new log sources and improve visibility across endpoints, servers, cloud services, and network infrastructure.

* Convert findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into improved monitoring content.

* Monitor platform health, storage, agent connectivity, licensing, and overall service availability.

* Support the Information Security team during security investigations by improving visibility, detections, and response workflows.

* Work with Infrastructure and IT teams to onboard new systems into EDR and SIEM.

* Produce operational documentation, standard operating procedures, and platform runbooks.

* Track detection coverage, platform performance, and continuous improvement initiatives.

What you'll bring

* Experience administering enterprise SIEM, XDR, or EDR platforms.

* Hands on experience with Wazuh, Trend Micro Vision One, Microsoft Defender XDR, Microsoft Sentinel, Elastic Security, Splunk, or similar platforms.

* Strong understanding of endpoint security, Windows, Linux, macOS, Active Directory, cloud environments, and network security.

* Experience tuning detection rules and reducing false positives.

* Familiarity with log collection, parsing, correlation, and security event analysis.

* Understanding of MITRE ATT&CK and common attacker techniques.

* Experience writing automation or scripting using Python, PowerShell, or Bash.

* Strong analytical and troubleshooting skills.

* Excellent documentation and communication skills.

What's in it for you

* Sporty is a remote-first company in pursuit of sustainability

* A competitive salary plus individual performance-based bonuses every quarter

* 28 days paid annual leave

* Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours

* Referral bonuses and flash bonuses

* Top-of-the-line equipment

* Annual company retreats that provide opportunities to connect and collaborate with colleagues from around the world

Interview Process

* Remote video screening with our Talent Acquisition Team

* Online assessment via Hackerrank

* Remote video interview with Team Members (60 Mins)

* Final discussion with the hiring manager (60 mins)

If you're interested, we encourage you to apply! Every application is reviewed by a member of our team and we aim to respond within 48 hours.

Originally posted on Himalayas