Top 5-6 required Skills which must have? | Platform Engineering and Policy Configuration - Map tools and configurations to security frameworks (NIST 800-53, CIS, MITRE ATT&CK/DEFEND, PCI).
- Identify configuration gaps and propose hardening measures based on latest threat intelligence.
- Align system/tool behavior to policy frameworks for mature security posture.
- Collaborate across platform and policy teams to support seamless security tool integration and agent deployments.
Policy Configuration Specialist (Blue Team) - Configure endpoint protection agents across Linux, Mac, and Windows.
- Translate framework standards into concrete tool configurations.
- Apply behavioral analytics and threat intelligence to harden systems proactively.
- Perform configuration reviews for tools like application control, firewalls, EDR, telemetry.
- Align to MITRE ATT&CK and MITRE DEFEND matrices with defensive configurations.
- Strong understanding of secure configurations per CIS Benchmarks.
Must Have: - Hands-on experience configuring security tools (EDR, firewall agents, telemetry, etc.)
- Ability to map tool configurations to framework controls.
- Strong Blue Team background (defensive security, threat detection, response).
Role Focus: Platform Security Engineer - Deploy and manage security agents and infrastructure integrations.
- Maintain back-end systems, SAS connectors, agent-to-server communication.
- Familiarity with security in AWS EC2, containers, databases, and hybrid infrastructures.
- Understand how agents interact with firewalls and networking layers.
- Provide integration support during live deployments and environment mergers.
Must Have: - Strong AWS knowledge (EC2, networking, container security).
- Hands-on experience with agent management platforms (deployment and upgrades).
- Comfortable with Windows, Linux, Mac agent behavior and integration.
Strong knowledge of regulatory and compliance standards (e.g., NIST 800-53, PCI, CIS, MITRE ATT&CK).
Experience with security tools
Data Loss Prevention (DLP)
Behavioral Analysis / UBA
EDR and Anti-Malware
File Integrity Monitoring
Telemetry and Logging
Application Control
Host-Based Firewalls
Privilege Management
Certifications: CISSP, CISM, GIAC,CCSP , AWS Security Specialty, Advanced Networking Specialty, Solutions Architect |