- Own and continuously improve Datadog Cloud SIEM, security monitoring and observability capabilities across production and corporate environments
- Design, build and maintain detection and telemetry capabilities across Datadog, SentinelOne, Wiz and related security platforms
- Develop, test and tune high-fidelity Datadog detection rules aligned to real-world attack scenarios and adversary behaviors
- Improve alert quality by reducing false positives, eliminating noise and increasing detection accuracy
- Design and maintain Datadog log pipelines, processors, parsing rules, facets, indexes, archives and retention strategies
- Implement and mature detection-as-code practices for scalable, version-controlled and testable rule management
- Define and enforce logging, telemetry and instrumentation standards across cloud infrastructure, applications, endpoints and identity systems
- Build and optimize log ingestion, parsing, normalization, enrichment and routing workflows
- Correlate signals across Datadog, EDR, cloud, identity and security platforms to improve detection depth and investigation quality
- Build Datadog dashboards, monitors, analytics and reporting that support operational decision-making across Security, SRE and Engineering
AWSPythonTerraform+1 more