Staff Engineer, SOC Platform & Tools Group
Rakuten SymphonyMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessLog in to see why each signal reads the way it does.
Job Description
Structured overview of role & requirementsAbout This Role
Own the end-to-end telemetry lifecycle including log ingestion, pipeline routing, and SIEM/SOAR infrastructure management to support detection and response.
Architect and manage clustered, multi-site deployments of Splunk/Elastic and SOAR platforms, including performance tuning and automation playbooks to reduce MTTR.
Operate and optimize telemetry pipelines (Cribl Stream/Edge), log collection across diverse sources, and manage full platform infrastructure on-premises and GCP using IaC tools like Terraform and Ansible.
Minimum Requirements
10+ years of experience in security/SOC engineering, log management, or infrastructure engineering.
Hands-on production experience administering Splunk/Elastic and SOAR platforms including clustering and playbook development.
Expert-level experience with log pipeline tools such as Cribl Stream/Edge and strong Linux administration skills (RHEL/Ubuntu) including scripting in Python/Bash.
Working knowledge of GCP services, networking fundamentals (TCP/UDP, DNS, routing), and syslog fundamentals for high-volume environments.
Ideal Candidate Profile
Experienced in managing large-scale SOC platform engineering bridging network operations, security analysts, and platform engineering.
Demonstrated expertise in hybrid cloud/on-premises environments with strong DevOps skills using Kubernetes, Terraform, and Ansible for automation and platform health management.
Background in telecom or service provider environments with familiarity in Mobile Core, 5G, and related protocols is a strong advantage.