Security Platform Engineer

Role Overview

We are seeking a pragmatic Security Platform Engineer with expertise in runZero or a similar cybersecurity product to support deployment and operationalization within the client environment. This role involves close collaboration with architects, product specialists, and various cyber technology teams to drive implementation, coordinate agent rollouts, manage firewall configurations, and enforce security controls like SSO and MFA.

Platform Engineering and Configuration

• Design and implement a structured runZero platform operating model encompassing environments, roles, access, asset groups, tags, and naming conventions.
• Configure discovery coverage across corporate, data center, cloud, remote access, network, IoT, and relevant OT environments.
• Develop tailored active scanning, passive discovery, and integration methods suited for different network zones and risk profiles.
• Formulate standards for safe scanning practices, including approval gates, maintenance windows, and exception handling for sensitive systems.
• Define asset classification with associated ownership, business context, criticality, and lifecycle information.
• Create policies for handling transient, ephemeral, duplicate, decommissioned, and unmanaged assets.
• Develop reusable configuration templates to apply consistently across multiple sites and environments.
• Maintain clear separation between production, testing, and experimental configurations.

Integrations and Data Engineering

• Integrate runZero with CMDBs, ServiceNow, Tenable, EDR, NAC, DNS/DHCP services, cloud platforms, identity management systems, SIEM, SOAR, and infrastructure tools.
• Implement secure API-based data ingestion and egress using service identities with least-privilege access.
• Automate asset reconciliation, deduplication, data enrichment, ownership mapping, and quality control.
• Ensure downstream systems receive consistent, relevant, and appropriately scoped data instead of uncontrolled noise.
• Define integration specifications including contracts, schemas, field mappings, error handling, retry logic, and support expectations.
• Build mechanisms to monitor integration health, detect stale credentials, sync failures, and abnormal data volume changes.

Automation and Workflow Engineering

• Automate platform onboarding, configuration validation, scan scheduling, asset tagging, reporting, and operational maintenance.
• Develop automated routing workflows to direct actionable exposures to appropriate security, infrastructure, network, cloud, or application owners.
• Implement event-driven workflows handling new assets, exposed services, control gaps, unauthorized devices, and significant changes.
• Design idempotent automation that avoids duplicate records, tickets, or configuration drift on re-execution.
• Leverage APIs, webhooks, scripts, and workflow tools to minimize manual tasks and improve response times.
• Introduce approval workflows for critical or potentially disruptive actions.
• Automate asset lifecycle processes managing retired, renamed, moved, rebuilt, or short-lived assets.

Site Reliability Engineering and Operations

• Apply Infrastructure-as-Code principles to runZero configuration and operational workflows.
• Implement version control, peer review, automated testing, release management, and rollback procedures for platform modifications.
• Define and monitor service-level indicators and objectives covering discovery coverage, data currency, integration health, scan success, alert delivery, and remediation workflows.
• Create dashboards and alerts for early detection of platform degradation before impacting consumers.
• Develop operational runbooks addressing common failures such as collector/explorer issues, scan failures, integration errors, data quality problems, and access issues.
• Design appropriate backup, recovery, disaster recovery, and business continuity plans.
• Perform capacity planning, performance tuning, and scalability assessments as platform coverage grows.
• Manage credentials securely through enterprise-approved secrets management; avoid embedding secrets in code or config files.
• Implement role-based and privileged access controls with administrative separation and auditable change tracking.
• Support security and architecture reviews, privacy assessments, risk evaluation, and control assurance processes.
• Ensure all data handling, logging, retention, residency, and external access comply with Optus security policies and regulations.