Role Description We are seeking a highly skilled Senior SOC Platform Engineer with strong expertise in CrowdStrike Falcon Next-Generation SIEM, Falcon Fusion SOAR, Falcon EDR, Python automation, threat hunting, and detection engineering. This role is responsible for engineering, optimizing, and scaling SOC platform capabilities that enable advanced threat detection, incident response, security analytics, and SOC transformation initiatives. The successful candidate will act as a technical lead for security platform engineering, supporting customer onboarding, SIEM/SOAR content development, automation initiatives, threat intelligence integration, and SOC maturity programs. Microsoft Sentinel experience is required as a secondary platform. - Design, deploy, manage, and optimize CrowdStrike Falcon Next-Gen SIEM environments. - Configure detections, correlation rules, dashboards, reports, and alerting logic. - Engineer Falcon Fusion SOAR workflows for automated incident response. - Manage Falcon EDR policies, detections, investigations, and response actions. - Develop Python-based automation for SOC operations and threat-hunting activities. - Integrate third-party security telemetry and threat intelligence feeds. - Build MITRE ATT&CK aligned detection content. - Conduct proactive threat hunting using Falcon, Defender, and Notebook-based analytics. - Support Microsoft Sentinel analytics, playbooks, data connectors, and KQL content development. - Maintain platform documentation, SOPs, runbooks, and architecture standards. Qualifications - 5–10+ years of experience in Security Operations, SIEM, SOAR, EDR, or Security Engineering. - Hands-on experience with CrowdStrike Falcon Next-Gen SIEM. - Experience with Falcon Fusion SOAR and Falcon EDR. - Strong knowledge of threat detection, incident response, and threat hunting. - Proficiency in Python, REST APIs, PowerShell, and automation frameworks. - Working knowledge of Microsoft Sentinel, KQL, Azure Logic Apps, and Microsoft Defender. - Experience with cloud platforms including Azure, AWS, and GCP. - Strong communication and stakeholder management skills. Requirements - Lead engineering efforts for Falcon SIEM, SOAR, and EDR platforms. - Develop and tune detection use cases and correlation logic. - Create reusable automation and onboarding frameworks. - Support SOC operations through enrichment and orchestration. - Ensure telemetry quality, data normalization, and coverage optimization. - Participate in threat hunting and purple-team exercises. - Mentor analysts and platform engineers. - Support client onboarding and SOC transformation programs. - Drive continuous improvement and operational excellence. Preferred Skills - Splunk Enterprise Security - Microsoft Security Copilot - ServiceNow Security Operations - Palo Alto Cortex XSOAR - Infrastructure as Code (Terraform, ARM, Bicep) - CI/CD and DevSecOps concepts Preferred Certifications - CrowdStrike Certified Falcon Administrator (CCFA) - CrowdStrike Certified Falcon Responder (CCFR) - CrowdStrike Certified Falcon Hunter (CCFH) - Microsoft SC-200 - Microsoft AZ-500 - CISSP - CISM - GCIH Experience Level Senior Individual Contributor / Lead SOC Platform Engineer

• Design, configure, develop, and maintain OneStream solutions and applications. • Develop workflows, dashboards, reports, business rules, and data integrations. • Build and support financial planning, budgeting, forecasting, and reporting solutions. • Create and maintain APIs and automated data interfaces. • Support financial close, reconciliation, compliance, and audit initiatives. • Perform unit testing, system testing, and UAT support. • Troubleshoot application issues and optimize platform performance. • Develop technical documentation and support knowledge transfer activities. • Collaborate with architects, analysts, and stakeholders in Agile development cycles.

• Build the frontend layer of the Portable Platform: Design and ship the frontend architecture that lets React engineers write once and run across web and React Native. • Lead the React Web to React Native transition: Navigate the extraction from a pure React Web codebase to React Web plus React Native. • Own the web implementations of common abstractions: Build the web side of shared Portable Platform components — the pieces that work consistently across iOS, Android, and browser. • Support the upskilling of frontend engineers: Help them understand the new mental model — through code standards, documentation, design reviews, and direct collaboration. • Bring SSR and React Server Components into the picture: Reason about server-side rendering and RSC and how a backend wires up to the portable frontend layer. • Stay hands-on: Staff engineers at Canva ship code. You’ll be in the codebase, writing design docs, committing to production.

• Design and build a clean, functional front-end platform that allows users to browse, search, and filter a repository of climate tech content. • Architect a backend database with a structured submission schema that can be accessed by The New York Climate Exchange. • Integrate a submission portal with form fields, file support (including large files such as decks and videos), IP acknowledgement, and automated reviewer routing. • Implement a lightweight review routing workflow for internal administrators to track submission status, assign reviewers and permissions, and manage publication. • Add roles and permissions based on user type and ensure privacy on platform using secure login. • Integrate a search (either tagging tools, or AI assisted) to be able to parse and browse content. • Outline recommendations for future development and maintenance of platform including rough cost estimates.