Platform Engineer
Summary
Platform Engineer at NCS Philippines who designs, deploys, and maintains the security tooling stack (SIEM, EDR, firewalls, IDS, threat intel platforms) inside a SOC, automates security workflows, and keeps runbooks and documentation current. On-site role in Bonifacio Global City requiring 2-3 years of SOC/CERT experience and system administration skills.
GENERAL RESPONSIBILITIES:
The Platform Engineer is responsible for designing, implementing, and maintaining the security technology stack within the SOC environment. This includes deploying, configuring, and integrating security tools, automating security processes, and collaborating with other SOC team members to ensure the effective operation of the security infrastructure.
DUTIES AND RESPONSIBILITIES:
Deploy, configure, and integrate a variety of security tools and technologies, such as SIEM, EDR, firewalls, intrusion detection systems, and threat intelligence platforms, to enhance the SOC's capabilities.
Develop and maintain comprehensive documentation for deployed security solutions, including configuration guides, runbooks, and troubleshooting procedures.
Collaborate with security analysts to understand their tooling needs and ensure that security platforms effectively support incident response and threat analysis activities.
Automate security tasks and workflows to improve the efficiency and effectiveness of SOC operations.
Work closely with threat intelligence teams to integrate threat feeds into security platforms and enhance threat detection capabilities.
Proactively identify and mitigate risks associated with security tools and platforms through continuous monitoring and evaluation.
Stay abreast of emerging security technologies and trends to ensure the SOC's technology stack remains current and effective.
Maintain and optimize existing platform solutions. This includes troubleshooting issues, applying updates and patches, and ensuring the platform remains stable and performant.
Contribute to developing and maintaining SOC playbooks and runbooks for common security events.
Communicate technical information clearly and effectively to both technical and non-technical audiences.
Meet individual and group objectives and contribute to the achievement of key performance indicators (KPIs).
JOB SPECIFICATIONS:
Education – Bachelor’s Degree in IT, Computer Science, Engineering, or a related field.
Related Work Experience - Minimum 2-3 years of experience in a Security Operations Center (SOC) or Computer Emergency Response Team (CERT/CSIRT) environment.
Proven experience in system administration, including server management (system and web application), operating systems (Windows, Linux, macOS, Android), web services/APIs, and cloud technologies.