L3 Security Platform Engineer

Lead advanced triage, investigation, and analysis of high-severity security alerts and incidents across SIEM, endpoint, network, email, identity, and cloud security platforms.

Administer and maintain security platforms including configuration, rule tuning, alert validation, data source onboarding, and access management.

Mentor junior SOC analysts, coordinate incident response with multiple teams, and support 24/7 SOC operations in a Follow-The-Sun model based in Hyderabad.

Work Experience Required: Not explicitly mentioned in the JD.

Must have hands-on experience in SOC operations and security platform administration across SIEM, endpoint detection and response, email, cloud, and identity security.

On-site work required in Hyderabad, India, supporting global security operations under a Follow-The-Sun model.

Preferred professional certifications include CompTIA Security+, CySA+, GCIA, GCIH, GCFA, CEH, or cloud/security operations certifications like SC-200, AZ-500.

Experienced in advanced threat investigation, deep log analysis, event correlation, and threat hunting in an enterprise SOC environment.

Proficient with enterprise security technologies such as Microsoft Sentinel, Splunk, QRadar, CrowdStrike, Palo Alto, or similar platforms including cloud security monitoring.

Able to lead technical escalations, mentor junior analysts, and improve SOC detection use cases, workflows, and operational reporting.