Cybersecurity Platform Engineer

Cybersecurity Platform Engineer – CP AI SOC Command Post | Cybersecurity & AI Operations Command Post is expanding its cybersecurity platform team and is looking for a Cybersecurity Platform Engineer to support the continued development, deployment and customer adoption of the CP AI SOC. This is a hands-on technical and customer-facing role spanning AI-driven security operations, security integrations, technical presales, POCs, customer onboarding and platform support. The CP AI SOC brings together security telemetry, assets, vulnerabilities, identity and threat context with AI-driven analysis, correlation, prioritisation and automation to help organisations improve security visibility, investigation and response. We are looking for someone who understands cybersecurity technology, enjoys troubleshooting complex systems and can work comfortably across customers, SOC operations and engineering teams. What you'll be doing CP AI SOC Platform & Integrations - Support configuration, deployment and operation of CP AI SOC environments. - Troubleshoot integrations, connectors, APIs and security telemetry. - Support ingestion and correlation of asset, vulnerability, identity, alert and threat data. - Integrate the platform with enterprise technologies including SIEM, EDR/XDR, vulnerability management, identity and cloud security platforms. - Investigate platform and integration issues using logs, APIs and underlying data. - Work directly with engineering teams to diagnose and resolve technical issues. - Validate platform behaviour, security controls, permissions and integrations as part of normal delivery activities. - Help automate platform deployment, integration and operational processes. AI-Driven Security Operations - Support customers in operationalising CP AI SOC within existing SOC environments. - Help develop and refine AI-assisted security monitoring and investigation workflows. - Support correlation and enrichment of alerts using asset, identity, vulnerability and threat context. - Assist with development of automated triage, investigation and response workflows. - Work with engineering teams on the continued development of AI agents and agentic security operations. - Support appropriate human approval and governance controls around automated security actions. - Help identify opportunities where AI and automation can reduce analyst workload and improve response times. echnical Presales & POCs - Participate in customer discovery sessions and technical workshops. - Deliver and support CP AI SOC demonstrations. - Design and execute customer POCs. - Understand customer SOC and cybersecurity architectures and identify appropriate integration points. - Translate customer requirements into platform configurations and operational use cases. - Develop technical solution architectures and integration approaches. - Support proposals, RFPs and RFIs. - Demonstrate AI-assisted security workflows to technical, operational and management stakeholders. - Support transition from presales and POC into customer implementation. Customer Onboarding & Platform Support - Support onboarding and configuration of new customer environments. - Assist customers with platform configuration, integrations and troubleshooting. - Investigate reported issues and own technical problems through to resolution. - Coordinate with engineering where product changes or deeper investigation are required. - Support upgrades and deployment of new capabilities. - Develop implementation guides, integration documentation and technical knowledge articles. - Capture customer requirements and provide structured input into the CP AI SOC product roadmap. What we're looking for We are particularly interested in candidates with experience across several of the following: - SOC or security operations - Cybersecurity engineering - SIEM - EDR/XDR - Security orchestration and automation - Vulnerability management - Identity and access management - Cloud security - Threat detection and incident investigation - Security integrations and APIs - Linux and containerised environments - REST APIs and JSON - SQL/PostgreSQL - Python, PowerShell or Bash - SaaS cybersecurity platforms - Customer implementation and technical support - Cybersecurity presales and POCs Experience with technologies such as Microsoft Sentinel/Defender, Palo Alto Cortex, CrowdStrike, Splunk, Elastic, Tenable, Qualys, Rapid7 or similar security platforms would be beneficial. Experience or a strong interest in AI, LLMs, security automation and agentic AI would be particularly valuable. You do not need to be a full-time software developer, but you should be sufficiently technical to investigate problems independently, understand logs and API responses, troubleshoot integrations and communicate effectively with software engineers. The person we're looking for This role will suit someone who: - Has strong practical cybersecurity and SOC knowledge. - Understands how modern security technologies work together. - Enjoys investigating and solving complex technical problems. - Can work independently rather than simply escalating issues. - Is comfortable engaging directly with customers. - Can confidently demonstrate technology and explain complex concepts. - Takes ownership of issues through to resolution. - Can move comfortably between a SOC, customer workshop and engineering discussion. - Is interested in AI, automation and the future of cybersecurity operations. Why Command Post? Command Post is building an integrated cybersecurity platform connecting asset discovery, vulnerabilities, identities, security operations, risk, compliance, privacy and AI governance. The CP AI SOC is the operational security layer of that ecosystem, combining security telemetry and enterprise context with AI and automation to help security teams identify, investigate, prioritise and respond to threats more effectively. The successful candidate will work directly with the team building these capabilities and help take the CP AI SOC into customer environments. This is not a traditional SOC analyst or support position. The role sits across cybersecurity engineering, AI-driven security operations, product, customer implementation and technical presales and provides an opportunity to help shape how the next generation of security operations is delivered.