{"id":2419908,"url":"https://alion.io/job/eze-castle-integrations-security-platform-engineer-devsecops","title":"Security Platform Engineer (DevSecOps)","company":{"id":3810727,"name":"Eze Castle Integrations","domain":"eci.com","url":"https://alion.io/company/eze-castle-integrations","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":82000,"max_usd":162000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":374},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Configuration Management","optional":false},{"name":"Docker","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"ElasticSearch","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kibana","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Logstash","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-20T05:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T08:27:11Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"Security Platform Engineer (DevSecOps)\nPosition Summary\nThe Security Platform Engineer is part of ECI's Security Engineering team and focuses on building, operating, and improving the platform layer that powers security services at scale. This is a hands-on engineering role with strong emphasis on Elastic platform operations, telemetry pipeline reliability, and lifecycle management. You will design and maintain data ingestion patterns, platform standards, and operational controls that ensure security data is reliable, performant, and ready for detection and response use. As part of our modern engineering approach, this role uses AI-assisted workflows to improve delivery quality, reduce repetitive operational effort, and accelerate security outcomes across detection, response, and platform services.\nYou will work within the Platform function, where your focus is owning Elastic, Logstash, and core data pipeline operations across client environments. You will partner closely with Automation Engineering, which is accountable for detection-as-code workflows, SOAR orchestration, and automation delivery that runs on top of the platform. In practice, this means Platform owns data ingestion, parsing standards, schema quality, retention, and platform reliability, while Automation owns how workflows and detection logic are engineered, tested, deployed, and maintained.\nResponsibilities\nBuild and maintain Elastic platform services, data pipelines, and operational standards across security environments.\nOwn Logstash and ingestion pipeline lifecycle including onboarding, parsing, normalization, enrichment, and schema governance.\nMaintain platform reliability through performance tuning, capacity planning, retention management, and upgrade planning.\nDefine and enforce data quality standards to ensure telemetry is complete, consistent, and usable for detection and response workflows.\nTroubleshoot and resolve ingestion, indexing, search performance, and pipeline stability issues in production environments.\nOwn platform-side client lifecycle readiness including onboarding standards, technical validation, and production go-live criteria.\nBuild and maintain platform observability using metrics, logging, health checks, and operational runbooks.\nPartner with Automation Engineering to provide stable data contracts and platform interfaces for detection and workflow delivery.\nCollaborate in architecture and operational review practices to raise engineering standards across the function.\nExplore and apply AI-assisted engineering practices to improve platform reliability, telemetry quality, operational documentation, and delivery efficiency.\nRequirements\nDegree in Computer Science, Cyber Security, Engineering, Information Technology, or equivalent practical experience.\n3+ years supporting or engineering production SIEM, observability, or large-scale data platform environments.\nStrong understanding of telemetry ingestion, parsing, normalization, enrichment, and schema management.\nExperience troubleshooting distributed platform issues across ingestion, indexing, search, and data lifecycle.\nPractical experience with platform lifecycle operations including upgrades, patching, configuration management, and performance tuning.\nExperience working with REST APIs and integration patterns in operational environments.\nWorking knowledge of Linux administration in engineering environments.\nWorking knowledge of cloud platforms and services, including IAM, networking, and secure integration patterns in AWS, Azure, or GCP.\nFoundational understanding of detection and incident response concepts within security operations.\nPreferred\nExperience administering enterprise SIEM or security analytics platforms in production, especially Elastic Security.\nHands-on experience with Elastic Stack platform operations, including Elasticsearch, Logstash, and Kibana.\nFamiliarity with data retention strategy, index lifecycle management, and storage optimization in high-volume environments.\nExperience with infrastructure as code and configuration tooling such as Terraform or Ansible.\nExposure to containerized deployment patterns with Docker or Kubernetes.\nFamiliarity with MITRE ATT&CK and how telemetry quality supports detection coverage.\nExperience supporting managed client onboarding and multi-tenant security platform operations.\nExperience developing operational tooling or scripts to improve platform reliability and consistency.\nWhat Good Looks Like\nYou keep the platform stable, performant, and dependable under real operational load.\nData onboarding and pipeline changes are delivered consistently with clear validation and minimal production disruption.\nTelemetry quality is high, with clear standards and measurable improvements over time.\nPlatform services are observable and maintainable through strong runbooks, metrics, and operational discipline.\nYou raise team engineering standards through thoughtful design, documentation, and collaborative reviews.\nYou use AI-assisted workflows in practical, controlled ways that improve platform reliability, operational consistency, and delivery speed.","description_format":"text","description_chars":5123,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Information Security","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-13T04:52:21Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.431,"p_room":0.35,"age_days":54,"expected_fill_days":19,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/eze-castle-integrations-security-platform-engineer-devsecops","json_url":"https://alion.io/job/eze-castle-integrations-security-platform-engineer-devsecops.json","meta":{"generated_at":"2026-10-13T11:40:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18006,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3810727},"rest":"https://alion.io/mcp/rest/get_company?id=3810727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feze-castle-integrations-security-platform-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feze-castle-integrations-security-platform-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feze-castle-integrations-security-platform-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eze-castle-integrations-security-platform-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feze-castle-integrations-security-platform-engineer-devsecops"}]}