Job Description

The Security Platform Engineer is responsible for operating, maintaining, and enhancing the organisation's security telemetry and analytics platforms with a strong focus on Google SecOps (SIEM/SOAR) and BindPlane. This role ensures reliable telemetry ingestion, platform stability, and seamless data delivery to support detection engineering, incident response, threat hunting, and broader security operations.

n

The ideal candidate brings deep technical hands-on experience with security platforms, data ingestion pipelines, cloud infrastructure, and automation tooling. They will collaborate closely with the SOC, incident response, cloud, and security engineering teams to ensure high-quality, scalable, and resilient security data pipelines and platforms.

n

Key Responsibilities

n

Google SecOps SIEM & SOAR Operations

n

n
- Configure, administer, and maintain Google SecOps SIEM and SOAR environments including tenancy setup, access controls, roles, and permissions.
n
- Operate and ensure ongoing health, performance, availability, and capacity of SIEM and SOAR platforms.
n
- Implement platform configuration changes, upgrades, and feature enhancements.
n
- Troubleshoot and resolve issues related to platform stability, integrations, and data ingestion.
n
- Support detection enablement, platform access requests, and incident-related data queries.
n

n

Telemetry Ingestion & BindPlane Engineering

n

n
- Configure, manage, and maintain BindPlane collectors, agents, and data ingestion pipelines.
n
- Oversee log and telemetry ingestion from cloud services, infrastructure, applications, and security tools.
n
- Design and maintain parsing,



normalisation, enrichment, routing, and delivery pipelines.
n
- Route telemetry to Google SecOps SIEM, BigQuery, and other downstream platforms.
n
- Monitor BindPlane throughput, latency, error rates, data loss, and pipeline health.
n
- Troubleshoot ingestion failures, parsing errors, schema mismatches, and performance bottlenecks.
n

n

Data Architecture, Quality & Reliability

n

n
- Design and implement scalable, resilient, and cost-optimised telemetry ingestion architectures.
n
- Validate data quality, schema consistency, field mapping, and delivery guarantees to support detection and analytics use cases.
n
- Maintain architecture diagrams, pipeline documentation, operational runbooks, and knowledge base content.
n

n

Automation & CI/CD

n

n
- Deploy platform and pipeline updates via CI/CD pipelines.
n
- Read and modify Python and Terraform code used within CI/CD workflows for minor fixes or enhancements.
n
- Integrate platform management tasks into automated deployment and validation processes.
n

n

Incident & Operational Support

n

n
- Provide platform-level support during security incidents and investigations, ensuring data availability, integrity, and timely access.
n
- Assist SOC and incident response teams with telemetry validation,



platform troubleshooting, and detection enablement.
n
- Collaborate with cloud engineering, infrastructure, DevOps, and security teams to improve reliability and operational maturity.
n

n

Required Skills & Experience

n

n
- Hands-on experience with Google SecOps SIEM/SOAR platforms.
n
- Expertise in BindPlane or similar telemetry ingestion technologies.
n
- Strong understanding of log formats, schemas, parsing, enrichment, and data routing.
n
- Familiarity with cloud environments (e.g., Google Cloud Platform, AWS, Azure).
n
- Experience troubleshooting data ingestion pipelines and performance issues.
n
- Ability to read and modify basic Python and Terraform code.
n
- Experience with CI/CD pipelines and automated deployments.
n
- Solid incident support and cross-team collaboration skills.
n

n

Preferred Qualifications

n

n
- Experience with BigQuery or other cloud-based analytics platforms.
n
- Understanding of detection engineering concepts and operational security telemetry requirements.
n
- Background in SOC operations, cloud engineering, or security engineering.
n
- Certifications such as Google Professional Cloud Security Engineer, Google SecOps, or equivalent (nice to have).
n

n

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.

📌 Security Platform Engineer (Google SecOps & BindPlane) (North Shore)
🏢 Paxus
📍 North Shore