Platform Technician I
Location : Philippines
Schedule :
Must be willing to potentially work on a shift schedule outlined below.
- The working and non-working days follow this pattern : 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off at 12 hours per day. The specifics of scheduling may change based on business needs.
Summary Job Description and Functions :
BlueVoyant is looking for a Platform Technician 1 that must have experience working across a wide variety of security platforms and understands event ingestion / normalization for security analytics. In addition to event ingestion, the Platform Technician 1 will be responsible to ensure Next-Gen AV endpoint health and internal systems are functioning properly for our vast client base.
The candidate must understand core IT security and Network fundamentals and be well capable of working with a client-facing / customer-service mindset.
What you will do as a Platform Technician 1 :
Triage and troubleshoot service health issues with respect to our managed security solutionsTroubleshoot network connectivity, Linux operating system problems, event data flow issues, software installation issues and application incompatibilities with next-gen AVWork in a client facing role to assist customers with Endpoint AV ProductsPrimary Role Success Criteria :
Experience working with cloud based Next-Gen AV software (Sentinel One, CrowdStrike, Carbon Black, Microsoft Sentinel).Experience working with MDM / Package deployment tools for Windows / OSX / LinuxUnderstanding of core network protocols (DNS, DHCP, ARP, TCP / UDP, SSL, SSH, FTP)Linux systems and networking administration / troubleshootingUnderstanding of Cloud Providers and their services (AWS, Microsoft Azure, Google)Knowledge of virtualization platforms (VMWare, Hyper V)Event ingestion (Syslog, REST API, HTTP Event Collector, Splunk Universal Forwarder)Experience with SOAR platformsKnowledge of technology solutions in one or more of the following functional areas : Cyber Security, IT Network / Cloud Environment dataOwnership mindsetService monitoring delivery experience a plusExperience writing custom queries in SIEM (ideally in Microsoft Sentinel and Splunk)Secondary Role Success Criteria :
Hands-on experience with data pipelines and ingest, normalization and modeling solutions and processes with SIEM technologies (ideally Microsoft Sentinel and Splunk)Recent Experience using Sentinel or other big data database solutions for ingestion and analyticsPreferred Qualifications :
1-3 years of hands-on System / Network Administration experienceSecurity +, Network + preferred, but not required