Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 days ago

EDR Platform Engineer

Malomatia40 open roles

Where
Doha, Qatar, Qatar
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowEDR Platform EngineerMalomatia · Doha, Qatar, Qatar

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Malomatia's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market. Malomatia postings stay open a median of 22 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted 8 days ago

Malomatia median: 22 days open

The posting

Job Description

We are seeking an experienced EDR Platform Engineer-Elastic Security to administer, operate, maintain, and enhance an enterprise Elastic Security and Endpoint Detection & Response environment. The ideal candidate combines strong hands-on Elastic expertise with solid cybersecurity knowledge and advanced Linux administration and troubleshooting skills.

Ensure the organization’s Elastic Security platform and endpoint protection infrastructure remain secure, stable, highly available, scalable, and operationally effective while continuously improving security visibility, detection capability, endpoint coverage, and incident-response readiness

Responsibilities

EDR Platform Administration – Elastic security

 Administer and maintain Elastic Security and Elastic Defend (EDR) environments.  Deploy, configure, upgrade, and troubleshoot Elastic Agent on Linux and Windows endpoints.  Manage Elastic Agent centrally through Fleet and Fleet Server, including agent policies, integrations, and endpoint policies.  Monitor agent health, connectivity, policy status, telemetry, and data ingestion; troubleshoot offline, unhealthy, or degraded agents.  Configure EDR prevention, detection, response, endpoint isolation, and other response capabilities.  Manage large-scale EDR deployment across enterprise servers and workstations and execute upgrades with minimal disruption.  Coordinate upgrades, patches, configuration changes, technical documentation, troubleshooting procedures, and operational run-books.  Work closely with SOC analysts, infrastructure, network, systems, and cybersecurity teams; coordinate with vendors when escalation is required.  Administer Elasticsearch clusters supporting Elastic Security and monitor cluster/node health, shard allocation, indexing, disk and resource utilization.  Troubleshoot cluster, node, index, shard, authentication, authorization, connectivity, and performance issues.  Manage index templates, component templates, data streams, ILM policies, retention, users, roles, privileges, API keys, and certificates.  Administer Kibana and Elastic Security applications and support snapshot, restore, backup, and disaster-recovery procedures.  Administer and troubleshoot Logstash pipelines, including inputs, filters, outputs, and data ingestion.  Investigate delayed, dropped, duplicated events and identify ingestion bottlenecks.  Work with Elastic Agent integrations, Beats, Syslog, APIs, ingest pipelines, ECS, and related parsing/normalization technologies.  Configure, maintain, and tune Elastic Security detection rules to improve coverage and reduce false positives.  Create custom detections based on organizational threats and use cases using KQL, EQL, ES|QL, and Elasticsearch Query DSL.  Apply process whitelisting\block-listing following the best practice approach.

Qualifications

Linux Administration – Core Requirement

Strong Linux administration and troubleshooting capability is essential for this position.  RHEL, Alma Linux, Ubuntu, or similar enterprise Linux distributions.  Linux command-line administration, systemd/systemctl, journalctl, and operating-system log analysis.  File systems, mounts, permissions, ownership, users, groups, sudo, and access controls.  CPU, memory, disk, process, network, DNS, TCP/IP, SSH, and connectivity troubleshooting.  Firewall administration, SELinux, RPM/YUM/DNF/APT package management, and Bash scripting (preferred)  Ability to diagnose production issues directly from the Linux command line and perform structured root-cause analysis.

Technical Skills

Required  Strong hands-on experience with Elastic Stack: Elasticsearch, Kibana, Elastic Security, Elastic Defend, Elastic Agent, Fleet/Fleet Server, and Logstash.  Strong Linux administration and troubleshooting skills and good understanding of Windows endpoint security.  Cybersecurity fundamentals, SIEM/EDR operations, security-event analysis, and incident-response management.

Preferred  Elastic Cloud Enterprise (ECE), distributed/multi-cluster Elastic architectures, high availability, and disaster recovery.  Elasticsearch snapshot/restore, load balancers, reverse proxies, VMware or other virtualization platforms.  Ansible or similar configuration-management tools, Git, REST APIs, and Python scripting.

Experience & Education

 Approximately 3–5+ years of experience in cybersecurity, security engineering, infrastructure security, SIEM, EDR, or related technical roles.  Hands-on production experience administering Elastic Stack environments and troubleshooting complex Linux-based systems.  Experience operating EDR or endpoint-security technologies in enterprise and high-availability and critical infrastructure environment.  Bachelor’s degree in Information Technology, Computer Engineering, Information Security or equivalent professional experience.  Candidates with strong Elastic and Linux expertise but fewer total years of experience may also be considered.

Preferred Certifications  Elastic Certified Engineer, Elastic Certified Analyst, or relevant Elastic certification (preferred)  RHCSA / RHCE.  CompTIA Security+ / CySA+ or equivalent certification  GIAC, CISSP, or equivalent security certification (preferred) Key Competencies  Strong technical troubleshooting, analytical thinking, and structured root-cause analysis.  Ability to troubleshoot across endpoint, network, operating-system, ingestion, and Elasticsearch layers.  Ability to work effectively during critical production infrastructure and communicate clearly with technical and non-technical stakeholders.  Strong documentation skills and ability to work independently and collaboratively across technical teams.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Malomatia's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Malomatia's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Malomatia's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.