Job Description & Requirements

Position Overview

We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.

Key Responsibilities

·      Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.

·      Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.

·      Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.

·      Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.

·      Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.

·      Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.

·      Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.

·      Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.

·      Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.

·      Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.

·      Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.

·      Document processes, procedures,and configurations for knowledge sharing and compliance purposes.

Required Qualifications

·      Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.

·      Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.

·      Familiarity with FortiSOAR forsecurity orchestration, automation, and response.

·      Experience working with OrcaSecurity or similar cloud security posture management tools.

·      Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.

·      Strong understanding ofcybersecurity principles, threat detection, and incident response processes.

·      Ability to troubleshoot complexsecurity platform issues and propose effective solutions.

·      Excellent documentation,communication, and collaboration skills.

Preferred Qualifications

·      Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.

·      Experience with scripting orautomation tools to streamline security operations.

·      Familiarity with regulatorycompliance frameworks and audit requirements.

·      Bachelor’s degree in ComputerScience, Information Security, or a related field.

Position Overview

We are seeking a talented and motivatedSecurity Platform Engineer with expertise in Fortinet SIEM onboarding,patching, use case creation, and SentinelOne operations—including agentpatching. The ideal candidate will also demonstrate proficiency with FortiSOAR,Orca Security platforms, and Palo Alto platform management. This role iscritical for maintaining the integrity and effectiveness of our securityinfrastructure, supporting both proactive and reactive cybersecurityinitiatives.

Key Responsibilities

·      Lead the onboarding andintegration of Fortinet SIEM solutions, ensuring seamless data ingestion,correlation, and alerting.

·      Manage and execute patchingprocesses for Fortinet SIEM platforms and related infrastructure to maintaincompliance and optimal performance.

·      Develop, test, and implementuse cases within Fortinet SIEM to enhance detection capabilities and addressemerging threats.

·      Oversee SentinelOne operations,including the deployment, configuration, and patching of endpoint agents acrossthe organization.

·      Utilize FortiSOAR toorchestrate, automate, and respond to security incidents, improving incidentresponse efficiency.

·      Employ Orca Security for cloudsecurity posture management, vulnerability assessment, and compliancemonitoring.

·      Own Palo Alto Networks platformengineering for Cortex XSIAM/XDR (and related security services), includingtenant administration, upgrades/patching, health monitoring, troubleshooting,and lifecycle management.

·      Engineer data onboarding intoXSIAM: integrate log sources and telemetry (endpoint, network, cloud,identity), validate parsing/normalization, manage data models/mappings, andensure high-fidelity ingestion for analytics.

·      Develop and tune XSIAMdetection content (correlation rules, analytics, and alert logic): reduce falsepositives, build threat-focused use cases, and maintain content throughtesting, release, and continuous improvement.

·      Build and maintain XSIAMautomations and integrations (playbooks, case management workflows, enrichment,ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-callprocedures for reliable platform operations.

·      Collaborate withcross-functional teams to support security monitoring, incident response, andcontinuous improvement initiatives.

·      Document processes, procedures,and configurations for knowledge sharing and compliance purposes.

Required Qualifications

·      Proven experience with FortinetSIEM solutions, including onboarding, patching, and use case development.

·      Hands-on expertise inSentinelOne endpoint protection, with a focus on agent management and patching.

·      Familiarity with FortiSOAR forsecurity orchestration, automation, and response.

·      Experience working with OrcaSecurity or similar cloud security posture management tools.

·      Demonstrated experienceengineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (andideally XSOAR)—including integrations, data onboarding, content/detectiontuning, upgrades/patching, and troubleshooting.

·      Strong understanding ofcybersecurity principles, threat detection, and incident response processes.

·      Ability to troubleshoot complexsecurity platform issues and propose effective solutions.

·      Excellent documentation,communication, and collaboration skills.

Preferred Qualifications

·      Industry certifications such asFortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, orother relevant security certifications.

·      Experience with scripting orautomation tools to streamline security operations.

·      Familiarity with regulatorycompliance frameworks and audit requirements.

·      Bachelor’s degree in ComputerScience, Information Security, or a related field.

Are you ready to build the future of secure artificial intelligence — not just design it, but actually construct it? The AWS Generative AI Innovation Center stands at the forefront of the AI revolution, where we're not just advising on technology — we're in the trenches, writing code, architecting systems, and co-building alongside the world's most innovative organizations.

As businesses race to adopt transformative GenAI capabilities, security isn't just a checkbox — it's the foundation that makes innovation possible. In this role, you won't just advise on that foundation — you'll build it, hands-on, alongside the engineers and partners who are making GenAI real for customers.

We're seeking a Senior GenAI Security Consultant to embed directly with our Forward Deployed Engineering (FDE) teams, serving as the hands-on security builder who ensures every line of code, every architecture decision, and every customer delivery meets AWS's security bar. This isn't a strategy role — it's a builder role. You'll be in the code, in the architecture, and in the room where it happens, co-creating secure GenAI solutions at the bleeding edge of what's possible.

Why This Role Matters

In the GenAI Innovation Center, our Forward Deployed Engineers are on the front lines of customer delivery — building, prototyping, and shipping GenAI solutions at speed. Security excellence at this layer can't be bolted on after the fact. It has to be built in from the start, by someone who can work at the same technical depth as the engineers they're partnering with.

You'll be:

• Embedding directly within FDE engagements as the hands-on security builder, co-developing secure GenAI solutions alongside internal engineers and external partners
• Holding and enforcing the AWS security bar at the implementation level, ensuring customer deliveries meet the highest standards of security by design
• Partnering with internal builders and third-party partners to architect and implement security controls that are production-ready, not just conceptually sound
• Translating complex security requirements into working code, reusable components, and deployable accelerators that teams can build on
• Serving as the technical security authority within engagements, making real-time architectural decisions that protect customer trust without slowing delivery

The Innovation Opportunity

This role puts you at the absolute tip of the spear of AWS GenAI delivery. You'll have the unique opportunity to:

• Build security capabilities deployed immediately in production environments for some of the world's most demanding customers
• Collaborate with AWS's most talented Forward Deployed Engineers, shaping how security is implemented at the intersection of speed and rigor
• Develop reusable security patterns, reference architectures, and accelerators that scale your impact far beyond individual engagements
• Influence how AWS and its partners approach secure GenAI delivery from the ground up

If you're energized by building things that no one has built before, if you're as comfortable in an IDE as you are in an architecture review, and if you want to be the person who ensures that the most exciting GenAI deployments in the world are also the most secure, this role is for you. Join us in building the future of secure AI innovation at AWS.

Key job responsibilities

Security for GenAI

• Embed within FDE engagements as the hands-on security builder, co-developing and co-implementing secure GenAI solutions alongside internal engineers and partners
• Design and implement production-ready security architectures for enterprise GenAI deployments, with specific service configurations and working code, not just conceptual frameworks
• Build and deploy security controls specific to GenAI applications, including prompt injection defenses, data boundary enforcement, model access controls, and audit logging
• Develop reusable security accelerators, reference implementations, and deployable assets for AWS GenAI services that teams can adopt across engagements
• Conduct real-time security architecture reviews and implementation guidance within active customer engagements, ensuring security requirements are met at delivery

GenAI for Security Innovation

• Design and build innovative GenAI-powered security solutions within the context of customer engagements, demonstrating what's possible at the intersection of AI and security
• Develop proof-of-concepts and working prototypes for novel applications of GenAI in security operations, with a path to production deployment
• Build security-focused applications leveraging AWS GenAI services (Amazon Bedrock, Amazon GuardDuty, Amazon Security Lake, and others) that solve real customer problems
• Partner with internal builders and external partners to identify and implement GenAI-powered security capabilities that can be operationalized at scale
• Contribute to the development of new tools and methodologies that advance how GenAI is used to enhance security capabilities

Thought Leadership & Industry Impact

• Author technical content, reference architectures, and implementation guides that capture and scale the security patterns developed through customer engagements
• Present at AWS events and industry conferences on hands-on GenAI security implementation and forward-deployed security engineering
• Collaborate with AWS service teams to provide ground-level feedback on security features and capabilities based on real deployment experience
• Contribute to the development of security best practices and standards for GenAI implementation, grounded in practical delivery experience
• Share knowledge and mentor team members on secure implementation practices, elevating the security capability of the broader FDE community

Success in this role requires exceptional technical depth, the ability to build and ship production-quality security solutions under the time pressures of active customer engagements, and the judgment to make sound security decisions in real time without sacrificing delivery velocity.

A day in the life

As a Sr GenAI Security Consultant embedded with Forward Deployed Engineers, you might start your day in a working session with an engineering team, reviewing and hardening the security architecture of a GenAI application mid-build. By mid-morning, you're writing and testing security controls for a customer's Amazon Bedrock deployment, collaborating directly with a partner engineer on implementation. After lunch, you're in a rapid architecture review for a new engagement, identifying security requirements that need to be built in from day one. By afternoon, you're contributing to a reusable security accelerator that will benefit the next ten engagements after this one. Your day might conclude with a technical deep-dive with an AWS service team, sharing what you've learned from the field. Throughout the day, you'll balance hands-on building, real-time security decision-making, and knowledge capture — always at the forefront of what secure GenAI delivery looks like in practice.

About the team

Diverse Experiences

Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.

Inclusive Team Culture

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship and Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

AWS Global Services

AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.

Basic qualifications

• Bachelor's degree in business administration, finance, economics, computer science, data science, engineering, or other related field, or experience in a professional field or military
• Experience as technical specialist in design and architecture
• Experience in database (eg. SQL, NoSQL, Hadoop, Spark, Kafka, Kinesis)
• Experience in software development with object oriented language
• Experience in cloud based solution (AWS or equivalent), system, network and operating system
• 7+ years of security, compliance and risk management experience

Preferred qualifications

• AWS Professional level certification
• Experience in external or internal customer facing, complex and large scale project management

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Key Responsibilities:

- Implement DevSecOps frameworks and integrate security into CI/CD pipelines.

- Develop and automate cybersecurity measures, including threat management and vulnerability assessment.

- Lead security solutions deployment (SIEM, SOAR, CASB) for cloud environments.

- Drive "shift left" security integration and automate security testing in development cycles.

- Collaborate on cloud security strategies for AWS/Azure, ensuring compliance and risk mitigation.

Requirements:

- 10+ years in IT, with expertise in DevSecOps, cloud security (AWS/Azure), and cybersecurity.

- Proficiency in CI/CD, infrastructure automation, and security frameworks.

- Experience with SIEM, vulnerability management, and threat analysis.

- Strong automation skills (e.g., scripting, tools like Jenkins, Ansible).

- Agile/Scrum experience and ability to drive security in fast-paced environments.

About the Role
We are looking for a skilled Security Engineer with Web, SASE & Endpoint background to design, deploy, and support advanced web isolation and endpoint security platforms. You’ll work primarily with Menlo Security and Tehtris solutions to help customers implement Zero Trust web and endpoint protection strategies.

Key Responsibilities

• Implement and support Menlo Security Secure Web Gateway, Browser Isolation, and SASE solutions
• Deploy and manage Tehtris Endpoint Detection and Response (EDR/XDR) platforms
• Lead Proof of Concepts (PoCs), customer onboarding, and post-sales technical support
• Troubleshoot endpoint security incidents, web-based malware, and phishing attacks
• Collaborate with customers on Zero Trust web and endpoint security best practices
• Provide clear technical communication to both technical and non-technical stakeholders

Requirement

• 3 to 5 years experience in endpoint security, EDR, proxy, or web security solutions
• Hands-on experience with Windows/macOS endpoints and browser security concepts
• Familiarity with cloud and SASE environments preferred
• Strong problem-solving skills and customer service orientation

Description:

For this position, we are looking for a Security Engineer proficient in Elastic Stack with Devops background to assist one of our clients – a leading global investment bank.

The team is looking for an ICT Security Engineering professional to increase its capability to improve the detection & reaction to Cyber Threats by:

•

Deploying, maintaining and improving the new SIEM infrastructure

The new joiner will work in close collaboration with Production Infrastructure & Observability teams. Finally, the new joiner will fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

Responsibilities:

•Install and administrate the servers of the SIEM Infrastructure

•Develop automation on the different tasks and self-service tool

•Participate to the integration of new technologies logs

•Support logs parsing using custom parser/GROK development.

•Project management

•Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team

•Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.

•Comply with regulatory requirements and internal guidelines.

•Contribute to the reporting of all incidents according to the Incident Management System

Role Specific Technical Skills:

Production experience across the following technologies:

•Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)

•In-depth experience with Kafka

•Good working knowledge of Linux (RedHat/Ubuntu)

•Programming skills is MUST (Python or Bash) is appreciated.

•Experienced production support engineer

•

Platform integration skills are a plus - Experience in installation, configuration, documentation and

•

administration of multiple pre-production and production platforms in both virtual and physical

•

environments.

•

Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.

Specific Qualifications Required:

* Candidate must have a overall 7 or more years of experience with minimum 4-5 years on

relevant scope ie. Expertise in handling ELK stack for large platform or architecture