EAST's security monitoring platform is based on the MVC monolithic application architecture, providing experimentalists with the ability to visualise the device operating parameters. With the accumulation of large amount of data and the increase of analysis requirements, the scale of the system business is expanding. The problems of strong coupling, overlap and limited scalability of the various business components have gradually emerged. This paper aims to refactor the security monitoring platform based on microservice architecture. Firstly, we build a microservice framework, divide subsystems according to user requirements and build submodules according to business links. After that, the system hierarchy is optimized: the data source proxy is encapsulated, and the data platform is built as a layer. Finally, the system was implemented and tested with Kafka and Flink as the core real-time computing modules, whose output latency is within seconds. In fact, the refactored system is scalable and stable to support the experimental monitoring of EAST.