Technical Customer Success Engineer (Security)

Role Overview:

This role sits at the intersection of Technical Account Management, Cybersecurity Consulting, and Post-Deployment Support. It requires a blend of data-driven relationship management and hands-on security configuration.

Daily Activity: The role is a standard Customer Success function: weekly/bi-weekly meetings to review findings, analyze data, make configuration recommendations, and handle bugs/feature requests.

Skill Requirements: Security background is the priority (EDR, SIEM, SOC experience). Familiarity with endpoint protection is required.

Implementation/Maintenance: While the role is not primarily for "deployment," resources will need to handle configuration changes and assist customers with setups ("blurry line" between deployment and post-deployment).

Skill Requirements

1. Core Security Expertise (High Priority)

·         EDR & Endpoint Protection: Deep familiarity with Endpoint Detection and Response (EDR) platforms and overall endpoint security architecture.

·         SIEM & SOC Workflows: Understanding of Security Information and Event Management (SIEM) systems and how Security Operations Center (SOC) teams analyze, prioritize, and triage alerts.

·         Threat & Data Analysis: Ability to look at security data, identify trends or anomalies, and translate those findings into actionable insights for the customer.

2. Hybrid Technical Execution ("The Blurry Line")

·         While this isn''t a dedicated deployment/professional services role, the resource must be comfortable getting their hands dirty with:

·         System Configuration: Making ongoing configuration adjustments, tuning policies, and optimizing the platform for the customer''s specific environment.

·         Assisted Setups: Guiding customers through initial setup phases or new feature onboarding.

·         Technical Troubleshooting: Acting as the first line of defense for platform bugs and collaborating with product/engineering teams on feature requests.

Required Technical Skills

·         Security Tools: Hands-on experience or familiarity with:

·         SIEM: Splunk, Microsoft Sentinel, or IBM QRadar.

·         EDR/XDR: CrowdStrike Falcon, SentinelOne, or Microsoft Defender for Endpoint.

·         Network Analysis: Wireshark or Zeek.

·         Networking & OS Fundamentals: Deep understanding of TCP/IP, DNS, HTTP, firewalls, and basic administration of Windows and Linux operating systems.

Scripting (Preferred): Basic proficiency in Python, PowerShell, or Bash for automating routine triage tasks and parsing logs.