Platform Engineer

Job
Statement:

NopalCyber
makes cybersecurity manageable, affordable, reliable, and powerful for
companies that need to be resilient and compliant. Managed extended detection
and response (MXDR), attack surface management (ASM), breach and attack
simulation (BAS), and advisory services fortify your cybersecurity across both
offense and defense. AI -driven intelligence in our Nopal360° platform, our
NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets
anyone quantify, track, and visualize their cybersecurity posture in real -time.
Our service packages, which are each tailored to a client’s needs and budget,
and external threat analysis, which provides critical intelligence at no -cost,
help to democratize cybersecurity by making enterprise -grade defenses and
security operations available to organizations of all sizes. NopalCyber lowers
the barrier to entry while raising the bar for security and service.

Responsibilities:

• Design and develop
  detection rules and policies to identify cybersecurity threats across a
  wide range of platforms and technologies.
  
• Lead the design,
  development, and deployment of high -fidelity threat detection mechanisms
  across our diverse technology stack, including on -premise, cloud (AWS,
  Azure, GCP), and SaaS environments.   
  
• Collaborate with
  security analysts, threat hunt, and threat intelligence to understand
  emerging threats and devise effective detection strategies.
  
• Validate and tune
  detection content to minimize false positives and ensure high accuracy and
  efficiency.
  
• Stay update of the
  latest cybersecurity trends, tools, and technologies to continuously
  improve detection methodologies.
  
• Work directly
  with clients to onboard their environments onto our platform and integrate
  data sources, guiding them through the process.
  
• Document
  detection processes, create reports on security metrics, and communicate
  findings to stakeholders
  
• Good understand
  on network infrastructure, security and devices i.e. Firewalls, EDR, Email
  Security, Proxy, DLP, and IDS/IPS
  

Qualifications:

• Bachelor’s degree in
  Computer Science, Information Security, or a related field.
  
• At least 5 years of
  experience in cybersecurity, with a focus on threat detection, analysis,
  and incident response
  
• Strong knowledge of
  security information and event management (SIEM) systems, log management
  solutions, and detection platforms.
  
• Familiarity with attack
  patterns, tactics, techniques, and procedures (TTPs) used by cyber
  adversaries - MITRE ATT@CK and Cyber Kill Chain
  
• Experience with cloud
  security and understanding of cloud -based threat detection strategies.
  
• Strong communication
  and collaboration skills, with the ability to work effectively in a team
  environment and interact with clients
  
• Collaborate with
  Security Operations team on developing and automating alert response
  processes and playbooks
  
• Knowledge of security
  tools and technologies, such as SIEM, CSPM, EDR/XDR, SOAR, WAF, and
  IDS/IPS.
  
• Professional security
  certifications such as OSCP, GIAC (e.g. GCIH, GCIA), CISSP, or other
  relevant certifications are highly valued.
  
• Hands -on experience
  with SIEM platforms for log management and alerting. Ex: Splunk, Elastic
  Stack (ELK/Security Onion), IBM QRadar, Securonix, Wazuh or Azure
  Sentinel. Ability to create SIEM queries, dashboards, and integrate new
  data sources