Director, Platform Engineering

Description

At Cyber Maxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks.

We help our customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, and digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls.

By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors.

At Cyber Maxx, we value humility, transparency, intellectual curiosity, and a customer first approach.

The Director of Platform Engineering owns the architecture, reliability, and scale of the Elastic-based detection and log management platform that underpins Cyber Maxx's MDR service.

This is a working architect role, not a pure management role. The Director is expected to be personally accountable for the Elastic estate — able to reason about cluster topology, read an ingest pipeline, and make the call on an upgrade path — while also leading and developing the engineering team that operates it.

The role balances two competing demands. The majority of the department's throughput is operational: keeping client clusters healthy, managing access and credentials, and tuning ingestion and detection quality. The remainder is forward-looking architecture and scale work. The successful candidate will protect capacity for the second without letting the first degrade.

The department's flagship near-term initiative is the consolidation of the Elastic estate onto a single operating model. A migration plan already exists and is owned by the team's senior engineers. The Director's job is to land it.

• Platform Architecture: Own the end-to-end architecture of the Elastic estate, including deployment model, cluster topology, tiering, and multi-tenant isolation across the client base. Holds final sign-off authority on platform architecture decisions.
• Platform Consolidation: Lead the migration of the remaining ECE-based estate onto ECK. Execute against the existing engineering plan, close technical gaps, and drive the program to completion without service disruption.
• Hands-On Technical Leadership: Remain directly engaged in the platform — design reviews, upgrade planning, escalated troubleshooting, and prototype work. This role retains working knowledge of the environment rather than managing it at a distance.
• Capacity and Scale: Maintain and evolve the capacity planning model for the Elastic estate. Forecast ingest growth, size clusters and hardware, and drive the procurement cycle for the capacity required to meet contracted service levels.
• Change Control: Chair the weekly Platform Engineering change control forum and represent the department at the enterprise Change Advisory Board. Ensure platform changes are reviewed, staged, and reversible.
• Ingestion and Data Quality: Own the design and health of ingest pipelines, log source onboarding, and data quality standards. Partner with Detection Engineering and Security Operations on detection tuning and alerting quality.
• Upgrade and Lifecycle Management: Plan and execute Elastic version upgrades across all deployment estates with minimal client-facing disruption. Maintain platform currency and manage end-of-life risk.
• Incident Escalation: Act as the named Platform Engineering escalation contact under the Major Incident Management process. Lead root cause analysis for platform-originated incidents and drive remediation to closure.
• Team Leadership: Lead, coach, and develop a team of platform engineers. Own hiring, performance management, career development, and workload allocation. Run the department's operating cadence.
• Cross-Functional Leadership: Chair the Engineering Leadership Roundtable, the standing forum for alignment across software engineering, infrastructure, detection engineering, security operations, and product. Translate platform…