Cybersecurity Platform Engineer

The CyberOps Engineer is responsible for the design, deployment, operation, and continuous optimization of enterprise security platforms that support threat detection, response, and vulnerability management. This role serves as a technical authority for CrowdStrike, secondary resource for Tenable, and Stellar Cyber, ensuring these platforms are correctly integrated, tuned, and delivering high-fidelity security outcomes.

The position works closely with CyberOps analysts, incident responders, and security leadership to translate business and risk requirements into scalable, reliable security platform capabilities.

• Own the configuration, health, and ongoing optimization of CrowdStrike Falcon and other CrowdStrike product lines.
• Ensure platform availability, data integrity, and correct telemetry ingestion across endpoint, network, cloud, and identity sources.
• Act as the escalation point for complex platform issues impacting detection, response, or vulnerability workflows.
• Be a secondary resource for Tenable and Stellar Cyber platforms.

• Optimize CrowdStrike policies, prevention settings, and detections to balance protection and operational impact
• Support incident investigations by providing deep platform expertise and advanced telemetry analysis

• Integrate security platforms with SIEM, SOAR, ticketing, and reporting systems
• Support API-based integrations and automation to improve operational efficiency
• Validate and onboard new client installations log sources.

• Develop and maintain platform standards, runbooks, and operational documentation
• Identify gaps in telemetry, coverage, or detection logic and drive improvements
• Stay current with platform feature releases and recommend enhancements aligned to threat trends

• Hands-on experience administering CrowdStrike Falcon
• Scripting or automation experience (PowerShell, Python, APIs)
• Strong understanding of endpoint, network, identity, and cloud security telemetry
• Familiarity with the MITRE ATT&CK framework and incident response workflows

• Experience with additional security platforms such as SIEM, SOAR, EDR, or NDR
• Hands-on experience with Tenable (Tenable.io, Nessus)
• Hands-on experience with Stellar Cyber
• Cloud security experience (Azure, AWS, or GCP)
• Relevant security certifications (CrowdStrike, Tenable, GIAC, or equivalent)

• Security platforms are stable, fully integrated, and delivering high-quality detections
• CyberOps analysts receive actionable alerts with reduced noise
• Vulnerability data is accurate, prioritized, and trusted by stakeholders
• Leadership has confidence in platform coverage and security visibility

Netrio is a leading MSP in North America, specializing in IT solutions for small- to mid-market enterprises. We serve over 1,000 clients across industries with services including managed IT, cybersecurity, cloud, connectivity, voice, and custom application development.