Security Platforms Engineer, XSIAM & Automation

Kouga Local Municipality; South Africa; On-site; ZAR 900,000 - 2,000,000; Full time

Job summary

NTT DATA in South Africa is seeking a Principal Security Platforms Engineer to lead the MSSP Cortex XSIAM platform architecture, onboarding, and automation. You will mentor SOC engineers and collaborate with security, engineering, and customer success teams to drive platform excellence.

The role requires deep knowledge of XSIAM, SIEM, SOAR, and cloud security across Azure, AWS, and GCP, with strong scripting and API skills in Python, PowerShell, REST, and KQL.

Qualifications

• Deep expertise in Cortex XSIAM, SIEM, SOAR and XDR.
• Strong experience with security telemetry normalization and detection logic.
• Proficiency in Python, PowerShell, REST APIs, KQL and XQL.
• Cloud security exposure across Azure, AWS and GCP.

Responsibilities

• Own architecture, roadmap and evolution of the MSSP Cortex XSIAM and related platforms.
• Design multi-tenant service architecture for managed security services.
• Lead architecture reviews and drive scalability, performance and cost optimizations.
• Mentor SOC engineers and coordinate with engineering and customer success teams.
• Develop and maintain platform standards, procedures and integration guides.
• Provide L4 escalation support for complex platform issues and incidents.

Skills

Cortex XSIAM architecture

SIEM

SOAR

XDR

Detection engineering

Automation engineering

Python

PowerShell

REST APIs

KQL

XQL

Cloud security

Azure

AWS

GCP

Leadership

Mentoring

Job description

NTT DATA in South Africa is seeking a Principal Security Platforms Engineer to lead the MSSP Cortex XSIAM platform architecture, onboarding, and automation. You will mentor SOC engineers and collaborate with security, engineering, and customer success teams to drive platform excellence.

The role requires deep knowledge of XSIAM, SIEM, SOAR, and cloud security across Azure, AWS, and GCP, with strong scripting and API skills in Python, PowerShell, REST, and KQL.