> Markdown version of [/jobs/ext/1982726-security-platform-engineer](https://www.wearedevelopers.com/jobs/ext/1982726-security-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Platform Engineer - **Company:** Noblesoft Technologies - **Location:** Raleigh, NC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Distributed Systems, Intrusion Detection and Prevention, JSON, Python (Programming Language), Parsing, Windows PowerShell, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Scripting, Google Cloud, Enterprise Software Applications, Okta, Data Ingestion, Mitre Att&ck, Software Troubleshooting, Git, Infrastructure Automation Frameworks, Palo Alto Networks, Microsoft Sentinel, Cortex XSOAR Platform, Restful APIs, Splunk, Data Pipelines, Security Orchestration, Automation & Response - **Published:** August 8, 2026 - **Apply:** https://www.dice.com/job-detail/3cc16eea-e239-48ae-b474-95f34c37d5f0 ## About the Role * 5+ years of hands-on experience with Splunk Enterprise. * Strong experience administering and supporting Splunk Enterprise Security (ES). * Hands-on experience with Cribl Stream administration and pipeline development. * Strong understanding of log onboarding, parsing, field extraction, normalization, and CIM. * Experience with Splunk Search Processing Language (SPL). * Experience with index management, forwarders, deployment server, search heads, indexers, and clustered environments. * Experience integrating cloud and security products with Splunk. * Knowledge of Linux administration and troubleshooting. * Experience with REST APIs and JSON. * Scripting experience using Python, PowerShell, or Bash. * Strong troubleshooting and analytical skills. Preferred Skills * Experience with security automation platforms such as Tines, Splunk SOAR, Cortex XSOAR, Swimlane, or Torq. * Experience with Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike Falcon, Palo Alto, AWS, Azure, or Google Cloud Platform. * Knowledge of MITRE ATT&CK framework. * Familiarity with security operations and incident response workflows. * Experience with Git, CI/CD, and Infrastructure as Code. * Relevant certifications such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Security Certified Admin, Cribl Certified User/Admin, or security certifications such as CISSP or GIAC. Nice to Have * Experience designing enterprise SIEM architectures. * Experience with threat detection engineering. * Experience implementing SOC automation and orchestration workflows. * Exposure to cloud-native security monitoring and observability platforms. ## Description We are seeking an experienced Security Platform Engineer with strong expertise in Splunk Enterprise/Enterprise Security, Cribl Stream, and Security Automation platforms. The ideal candidate will be responsible for designing, implementing, optimizing, and supporting enterprise-scale SIEM and log management platforms while enabling automation across SOC operations., * Design, implement, and maintain Splunk Enterprise and Splunk Enterprise Security environments. * Deploy, configure, and manage Cribl Stream for log routing, filtering, masking, enrichment, and optimization. * Develop and maintain data onboarding pipelines from various security and infrastructure sources. * Configure and troubleshoot log ingestion, parsing, normalization, CIM mapping, and data models. * Optimize Splunk searches, dashboards, reports, and correlation searches for performance and scalability. * Build and maintain detection use cases, alerts, and security monitoring content. * Develop automation workflows using SOAR platforms such as Tines, Splunk SOAR, Cortex XSOAR, or similar automation tools. * Integrate security tools including Microsoft Defender, CrowdStrike, Palo Alto, Zscaler, Okta, Azure, AWS, and other enterprise technologies. * Perform troubleshooting of ingestion issues, parsing problems, search performance, and distributed architecture. * Work closely with SOC analysts, security engineers, architects, and infrastructure teams. * Implement best practices for platform monitoring, health checks, capacity planning, and upgrades. * Create technical documentation, SOPs, and operational runbooks. ## Related Videos - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Overflow: 5 Security and Privacy Tools for Developers](https://www.wearedevelopers.com/magazine/710-the-overflow-5-security-and-privacy-tools-for-developers)