Cybersecurity Platform Engineer
Meħtieġ:Security
Key Responsibilities
- Operate and maintain Palo Alto firewalls , including firewall rules/policies, patching, firmware upgrades, health checks, log reviews, configuration changes and troubleshooting.
- Maintain Carbon Black EDR , including RHEL-hosted servers, endpoint sensors, application services, logs, patching, endpoint onboarding and troubleshooting.
- Administer Cloudflare DDoS/WAF , including website onboarding/offboarding, WAF/security rules, IP whitelist/blacklist changes, SSL certificates, access/log reviews and vendor coordination.
- Administer CyberArk PAM , including privileged account onboarding/offboarding, access reviews, password management, service/change requests and audit logs.
- Perform vulnerability remediation, patch management, security reviews and preventive maintenance.
- Support cybersecurity incidents, investigations, assessments and audits.
- Maintain and test platform backup and restoration processes.
- Raise and manage change requests for system/configuration changes.
- Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.
- Ensure compliance with organisational cybersecurity policies, CSA Cybersecurity Act requirements and CCoP .
Mandatory Technical Skills
- Strong enterprise networking fundamentals: TCP/IP, VLAN, routing, NAT, DNS, network segmentation and troubleshooting .
- Hands-on experience with: Palo Alto NGFW or equivalent Carbon Black EDR or equivalent Cloudflare DDoS/WAF or equivalent CyberArk PAM or equivalent
- Experience with firewall policies, patching, log analysis, endpoint/security platform administration and troubleshooting.
- Understanding of secure/segregated or air-gapped environments , including controlled offline patch/file transfers.
Good to Have
- Vulnerability management, security hardening, incident response and change management experience.
- PKI / TLS / SSL certificate management.
- Experience supporting highly secured or CII environments.
- Certifications such as CCNA, Palo Alto, CyberArk Defender/Sentry or Cloudflare-related certification .