Associate Cybersecurity Platform Engineer

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem-solving, passion, and creativity to help us power the next leap in electronics. At Qnity, we’re more than a global leader in materials and solutions for advanced electronics and high-tech industries – we’re a tight-knit team that is motivated by new possibilities, and always up for a challenge.

All our dedicated teams contribute to making cutting-edge technology possible. We value forward-thinking challengers, boundary-pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.

We are seeking an early-to-mid career Cybersecurity Platform Operations Analyst to support day-to-day security request triage, light security administration, evidence gathering, and operational follow-up across SIEM ingest, identity, endpoint security, email security, SaaS access, and application onboarding workflows. This role is intended for someone developing broad cybersecurity engineering experience while working under the direction of more senior cybersecurity engineers and architects.

The analyst will handle routine security requests, perform defined administrative activities within established standards, gather technical evidence, identify issues requiring escalation, and help ensure requests move efficiently through the cybersecurity organization. The successful candidate should have practical familiarity with Microsoft enterprise technologies and a strong interest in developing broader cybersecurity engineering skills.

Review incoming cybersecurity requests and determine the appropriate security domain, owner, and required next steps. Gather technical details, logs, screenshots, configuration information, and other evidence needed to evaluate requests. Perform routine, documented security administration activities within established procedures and delegated permissions. Identify requests involving elevated risk, privileged access, architectural changes, exceptions, or unfamiliar technologies and elevate them to senior cybersecurity staff.

Track open requests and coordinate with users, application teams, infrastructure teams, and cybersecurity engineers through resolution.

SIEM engineering, log forwarding, ingest, table management, such as Microsoft Sentinel or Google Chronicle or similar systems. DLP engineering, and backend system management for intermediate database storage of policies in Microsoft Purview or leading DLP products. Support operational use of Microsoft Sentinel, Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Entra , Microsoft Intune, and email security.

Review endpoint onboarding status, device health, basic alert context, email quarantine status, phishing submissions, risky sign-ins, and other routine security events. Assist senior engineers with troubleshooting Microsoft security platform integrations and configuration issues. Validate that systems and endpoints are correctly reporting into required security platforms. Gather evidence from Microsoft security consoles to support investigations, security reviews, audits, and operational troubleshooting.

Review basic Entra enterprise application configuration, authentication requirements, group assignments, and application access information from a security (not IAM) perspective.

Support endpoint-security operational activities involving Microsoft Defender for Endpoint and Intune-managed devices. Review endpoint security status, onboarding health, security configuration status, and basic device information. Gather relevant device evidence when investigating security requests or endpoint issues. Assist with routine troubleshooting of…