Security Platform Eng Senior Analyst

Summary

• We are seeking a highly motivated Frontline Site Reliability Engineer (SRE) to support and enhance the reliability, scalability, and security of our production platforms. This role acts as the first line of defense for incidents, monitoring alerts, and operational tasks across multi-cloud environments.
• The ideal candidate brings strong cloud operational knowledge (GCP preferred), hands-on experience with monitoring/observability tools, familiarity with SIEM/SOAR workflows, and the ability to troubleshoot distributed systems in real time. You will work closely with platform engineering, cloud operations, and security teams - including SOC- to ensure uninterrupted availability of business-critical systems.

🔹 Incident Response & Operational Support

• Serve as the primary responder for production incidents, alerts, and service interruptions.
• Perform initial triage, diagnosis, and resolution of platform and application issues.
• Act as PIM (Production Incident Manager) during SEV1/SEV2 incidents - driving coordination, communication, timelines, and stakeholder updates.
• Ensure SLA adherence and maintain clear communication during escalations.
• Handle incidents, service requests, and changes using Jira Service Management (JSM).
• Follow ITSM processes (Incident, Request, Problem, Change Management).

• Monitor infrastructure and applications using tools such as: GCP Monitoring, Datadog, JSM dashboards
• Analyze recurring alerts, reduce false positives, and contribute to alert tuning.
• Build or improve dashboards, log queries, and monitoring pipelines.
• Ensure operational visibility through metrics, logs, traces, and health checks.

• Provide frontline operational support for:
• GCP Compute Engine, Networking, IAM, Cloud Functions, GKE basics
• GCP Patch Management (OS patching, compliance, reporting)
  
• Support AWS environments as needed, including:
• AWS Workspaces provisioning and troubleshooting
• AWS SSM Patch Management
  
• Assist with deployments, configuration changes, and policy implementations.
• Perform day-to-day platform administration tasks across cloud infrastructure.

• Collaborate with SOC and engineering teams on security alerts.
• Support operational workflows involving SIEM (Chronicle, Splunk, ELK) and SOAR platforms.
• Identify the operational impact of security events and escalate appropriately.
• Apply basic cloud security principles (IAM hygiene, least privilege, MFA enforcement).
• Support the configuration and management of Microsoft Entra Connect (Azure AD Connect) for hybrid identity synchronization.
• Validate or triage security-related alerts that affect platform reliability.

• Automate operational tasks, repetitive workflows, and platform checks using:
• Python (preferred)
• YAML for CI/CD and configuration files
  
• Build simple tools or scripts to reduce manual toil and improve efficiency.

• Provide support for platform and operational tools including:
• GCP Patch Management
• AWS SSM, AWS Workspaces
• Terraform / Ansible (basic understanding)
• Git-based workflows (branches, PRs, version control operations)
  
• Support maintenance windows, patch cycles, and release operations.