Skip to content
DEV · Block 17 · 97 changes

A new headline, Linux Systems Engineer, and every page, the CV and its PDF matched to the new CV.

Cybersecurity Platform Engineer

Cybersecurity Platform Engineer

Nclose (Integrity360)

Search and log platform

~2PB

of data · about 2,000 laptops' worth

PB: petabytes: A petabyte is a million gigabytes. The clusters hold roughly 2 PB of data, about as much as 2,000 laptops with 1 TB drives.

Tap for the next figure, hold one for details

Total managed nodes

350+

Linux nodes

hardened and managed with Puppet

Linux nodes: A node is a single server. I look after more than 350 of them, locked down against attack (hardened) and kept consistent with Puppet, a tool that sets up every server from one central place.

Search and log platform

cluster nodes

220

Cluster nodes: Elastic and OpenSearch are search engines built for huge volumes of logs. My team and I run 5+ clusters of them, 220 servers in all, including the SIEM (security information and event management): the system that gathers security records from across a business so analysts can spot and stop attacks.

of data

~2PB

PB: petabytes: A petabyte is a million gigabytes. The clusters hold roughly 2 PB of data, about as much as 2,000 laptops with 1 TB drives.

average ingest

200kEPS

EPS: events per second: How many security events (log lines, alerts, audit records) the SIEM takes in, reads and stores every second, on average across all the clients it serves. 200k EPS is roughly 17 billion events a day.

Client deployments

15+

deployments delivered

for enterprises and government

Client deployments: Collectors and pipelines configured remotely inside a client's own environment. More than 15 so far, for international and national enterprises and government in consumer finance, higher education, oil and gas, retail and hospitality.

About

Give me something broken and a terminal, and I'll find out why.

I co-run large-scale search and log pipelines at a managed detection and response provider in South Africa: Elastic and OpenSearch clusters, the SIEM they power, and Puppet and Python across hardened Linux nodes. I've always thought in systems, and working things out on my own is what hooked me. It still does.

Off the clock

Basketball
Chess
Guitar
Hiking
Reading
Homelabs
Photography
Sailing
Started
2021, support desk
Learned
Self-taught
Mentored
20+ consultants & engineers
Based in
South Africa
Read more
My tech stack
tap a tool to see what it is
01

Case studies

All case studies →

Open to new roles

Thinking of hiring a great engineer?

Roles
Fully remote
Citizenship
Australian
Hours
07:00 to 19:00 SAST
Notice
One month