Security Platform Engineer (SIEM/SOAR, EDR, Google Sec Ops)

Join a High-Performance Culture That Drives Innovation and Excellence

At Vertiv, we don’t just hire talent—we cultivate leaders who drive innovation and engage teams to push the limits of what’s possible. As a global leader in critical digital infrastructure, we are scaling up to meet the demands of AI, data centers, and next-gen technology—and we need bold, high-performing individuals like YOU to take us to the next level. Why Vertiv? High-Performance Culture: We empower you to think big, execute with excellence, and deliver impact. Our performance-driven mindset rewards those who challenge the status quo and drive meaningful change. Over 50 CEO Awards are given annually to recognize top talent moving the needle forward. Leadership Without Limits: Leadership at Vertiv goes beyond just titles—it’s about accountability, trust, and ownership. Our leaders engage and drive with collaboration, innovation, and customer-centric thinking, setting the foundation for an action-focused culture. Limitless Growth & Learning: We believe in continuous development. Whether through rotational programs or high-impact projects, you’ll have the opportunity to expand your expertise and grow your career. A Place for Everyone: Our commitment to inclusion ensures that all employee’s unique strengths and perspectives are valued. Your voice matters, your growth is prioritized, and your success is celebrated.POSITION SUMMARY:The Security Engineer is responsible for the implementation, operation, and continuous improvement of security platforms that protect the organization's endpoints, data, cloud infrastructure, and network. This role operates within the Security Engineering team and serves as an escalation point for security-related incidents, policy exceptions, and technical investigations. The Security Engineer works closely with Security Operations, Governance Risk and Compliance, and broader IT teams to ensure security platforms are effective, well-documented, and aligned with organizational risk objectives.

KEY RESPONSIBILITIES

Security Platform Administration

Administer, configure, and maintain security platforms across the team's portfolio (endpoint detection and response, vulnerability management, cloud security, SIEM/SOAR)Maintain platform health and configuration, troubleshoot operational issues, and coordinate with vendors on break/fix and feature enablement

• Develop and maintain detection logic, policies, and rules within assigned platforms
• Tune alerting and detection to reduce noise, improve signal quality, and minimize false positives
• Validate, test, and deploy policy changes through established change control processes

Incident Support and Escalation

Serve as a technical escalation point for security incidents, investigations, and platform-related issues. Perform root cause analysis using logs, telemetry, and diagnostic platforms. Partner with Security Operations and IT teams to improve detection quality, response processes, and investigative capabilities. Provide guidance, procedures, and technical expertise to support teams and stakeholders. Documentation, Projects and Collaboration

Create and maintain technical documentation, runbooks, standards, and knowledge articles. Implement security projects and enhancements as defined by the architecture team, providing operational feedback and recommendations to inform future design decisions. Collaborate with Security, IT, Infrastructure, Application, and Governance teams to support business and security objectives. Contribute to knowledge-sharing, cross-training, and continuous improvement initiatives across the team.

QUALIFICATIONS

Required5+ years of experience. Experience administering and operating enterprise security platforms in a corporate environment. Familiarity with security operations workflows including incident triage, escalation, and root cause analysis. Understanding of common attack vectors, detection methodologies, and defense-in-depth principles. Experience working within ITIL-aligned processes (change management, incident management, problem management). Ability to clearly document technical procedures and communicate findings to both technical and non-technical audiences. Experience working in a ticketing system (ServiceNow or equivalent) for incident tracking and change control. Preferred

Experience with one or more of the team's core technology domains (endpoint security, vulnerability management, cloud security, SIEM/SOAR). Familiarity with scripting or automation for operational efficiency (PowerShell, Python, KQL, YARA-L, or similar). Experience operating in cloud environments (Azure, AWS, or GCP). Understanding of regulatory and compliance frameworks relevant to the organization. Optional Certifications by Specialization

• General Security: CISSP, Security+, GSEC, SSCP, or equivalent
• Cloud Security: AZ-500, AWS Security Specialty, CCSP, or equivalent
• Endpoint Security: Relevant vendor certifications (Microsoft, Crowd
• Strike, or similar EDR platforms)
• Detection Engineering: GCIA, GCIH, or equivalent

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities. OUR CORE PRINCIPALS: Safety. Integrity. Respect. Teamwork. Diversity & Inclusion.OUR STRATEGIC PRIORITIESCustomer Focus

Operational Excellence

High-Performance Culture

Innovation

Financial Strength

OUR BEHAVIORSOwn ItAct With Urgency

Foster a Customer-First Mindset

Think Big and Execute

Lead by Example

Drive Continuous Improvement

Learn and Seek Out Development