Security Platforms Engineer, Impulse Space

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
• Experience administering enterprise security tools such as Microsoft Defender, SIEM platforms, firewall security tools, endpoint detection and response tools, and cloud security platforms
• Relevant certifications such as Security+, CySA+, SC-200, AZ-500, CISSP, GCIA, GCIH, or similar

Desirable

• As a Security Platforms Engineer at Impulse, we are looking for someone to manage, maintain, and optimize enterprise security tools across endpoint, network, cloud, and monitoring environments
• This role is responsible for administering platforms such as Microsoft Defender, Wiz CSPM, SIEM solutions, firewall security tools, and other endpoint and cloud security technologies
• The Security Platforms Engineer will ensure security controls are properly implemented, operating effectively, and aligned with organizational security requirements
• This person will investigate alerts generated by the SIEM, support security incident analysis, and collaborate closely with the SOC to improve detection logic, tune policies, and onboard relevant log sources for effective monitoring and response
• Administer and maintain security platforms, including Microsoft Defender, Wiz CSPM, SIEM tools, firewall security solutions, and other endpoint and cloud security technologies
• Ensure security controls are implemented, operational, and functioning as intended across cloud, endpoint, and network environments
• Monitor, triage, and investigate alerts generated by the SIEM and other security tools
• Partner with the SOC to improve detection coverage, reduce false positives, and enhance alert fidelity
• Assist in developing, tuning, and maintaining SIEM use cases, correlation rules, dashboards, and detection policies
• Work with infrastructure, cloud, and application teams to configure and validate log collection and ingestion into the SIEM
• Support onboarding of new log sources and ensure logging is complete, normalized, and actionable for monitoring and investigations
• Validate tool health, integration status, and telemetry flow across the security stack
• Perform regular reviews of security tool configurations and recommend improvements to strengthen visibility and control effectiveness
• Support incident response activities by providing tool expertise, investigative analysis, and technical troubleshooting
• Document security tool configurations, processes, alert handling procedures, and operational standards
• Identify gaps in monitoring, detection, and control coverage, and recommend remediation actions
• Collaborate with internal stakeholders to support compliance, audit, and risk management requirements related to security tooling and monitoring
• Key Competencies:
• Security tool administration
• SIEM monitoring and alert investigation
• Detection tuning and policy enhancement
• Log onboarding and ingestion support
• Cloud and endpoint security
• Cross-functional collaboration
• Incident support and technical analysis