Security Platform Engineer

We are seeking a talented and motivated Security Platform Engineer with expertise in Fortinet SIEM onboarding, patching, use case creation, and SentinelOne operations - including agent patching. The ideal candidate will also demonstrate proficiency with FortiSOAR, Orca Security platforms, and Palo Alto platform management. This role is critical for maintaining the integrity and effectiveness of our security infrastructure, supporting both proactive and reactive cybersecurity initiatives.

Key Responsibilities:

• Lead the onboarding and integration of Fortinet SIEM solutions, ensuring seamless data ingestion, correlation, and alerting.
• Manage and execute patching processes for Fortinet SIEM platforms and related infrastructure to maintain compliance and optimal performance.
• Develop, test, and implement use cases within Fortinet SIEM to enhance detection capabilities and address emerging threats.
• Oversee SentinelOne operations, including the deployment, configuration, and patching of endpoint agents across the organization.
• Utilize FortiSOAR to orchestrate, automate, and respond to security incidents, improving incident response efficiency.
• Employ Orca Security for cloud security posture management, vulnerability assessment, and compliance monitoring.
• Own Palo Alto Networks platform engineering for Cortex XSIAM/XDR (and related security services), including tenant administration, upgrades/patching, health monitoring, troubleshooting, and lifecycle management.
• Engineer data onboarding into XSIAM: integrate log sources and telemetry (endpoint, network, cloud, identity), validate parsing/normalization, manage data models/mappings, and ensure high-fidelity ingestion for analytics.
• Develop and tune XSIAM detection content (correlation rules, analytics, and alert logic): reduce false positives, build threat-focused use cases, and maintain content through testing, release, and continuous improvement.
• Build and maintain XSIAM automations and integrations (playbooks, case management workflows, enrichment, ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-call procedures for reliable platform operations.
• Collaborate with cross-functional teams to support security monitoring, incident response, and continuous improvement initiatives.
• Document processes, procedures, and configurations for knowledge sharing and compliance purposes.

Required Qualifications:

• Proven experience with Fortinet SIEM solutions, including onboarding, patching, and use case development.
• Hands-on expertise in SentinelOne endpoint protection, with a focus on agent management and patching.
• Familiarity with FortiSOAR for security orchestration, automation, and response.
• Experience working with Orca Security or similar cloud security posture management tools.
• Demonstrated experience engineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (and ideally XSOAR)-including integrations, data onboarding, content/detection tuning, upgrades/patching, and troubleshooting.
• Strong understanding of cybersecurity principles, threat detection, and incident response processes.
• Ability to troubleshoot complex security platform issues and propose effective solutions.
• Excellent documentation, communication, and collaboration skills.

Preferred Qualifications:

• Industry certifications such as Fortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, or other relevant security certifications.
• Experience with scripting or automation tools to streamline security operations.
• Familiarity with regulatory compliance frameworks and audit requirements.
• Bachelor’s degree in Computer Science, Information Security, or a related field.

To apply,simply click the "Apply" button or send your updated profile to [email protected] 

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

Skills

Information Security, Certifications, Data Ingestion, Troubleshooting, Security Tools, Regulatory Compliance, Cloud Security, Correlation, Scripting, Computer Science, Threat Intelligence and Detection, Deployment