Cybersecurity Company (Ezeiza)

About the RoleThis role will play a key part in transforming our integration landscape to meet the demands of a modern, secure, and scalable architecture.The ideal candidate will balance hands‐on technical expertise with strong architectural and communication skills.
You'll collaborate across integral teams to ensure solutions meet business needs, align with enterprise architecture standards, and are delivered with precision, quality, and resilience.Key ResponsibilitiesMaintain and improve existing integration connectors (CrowdStrike, Sentinel, Palo Alto, Fortinet, etc.) across v1 and v2Build new vendor connectors as customer demand requires, handle auth flows, data formatting, batching, error handling, and rate limitingPotentially port the Flask to FastAPI as the platform migration progressesImplement the detection rule deployment pipeline push Sigma‐generated rules to SIEMs in monitor/block mode via vendor APIsBuild inbound event ingestion, pull security events from customer SIEMs into Augur for correlation and enrichmentOwn the credential management system, secure storage, rotation, and validation of customer API keys and OAuth tokensBuild and maintain bulk feed exports STIX/TAXII, EDL, CSV, and custom formats hosted on S3Design job scheduling and monitoring Celery tasks with retry logic, error alerting, sync status trackingSupport data lake integrations (Snowflake, Databricks) generate and deploy SQL‐based detections against customer schemasTroubleshoot customer integration issues, debug sync failures, credential problems, data format mismatchesWrite integration tests and maintain connector health checksRequired Skills & ExperiencePython 3+ years, this is 90% of the workREST API integration consuming third‐party APIs, OAuth2/API key auth, pagination, rate limiting, and retry with backoffSIEM/EDR platforms hands‐on experience with at least 2–3: CrowdStrike Falcon, Splunk, Microsoft Sentinel, Palo Alto, Fortinet, Zsca
#J-*****-Ljbffr