Observability Engineer with monitoring tools

- Design, implement, and manage log source integrations across identity (Okta, Azure AD), cloud (AWS, GCP, Azure), endpoint (CrowdStrike, SentinelOne), SaaS (Google Workspace, GitHub, Salesforce), and network layers. - Conduct telemetry gap analyses to identify coverage gaps against customer requirements and environments. - Normalize, parse, and enrich security telemetry to ensure reliable data for downstream detection and analytics workflows. - Deploy and configure SIEM and security data platforms (e.g., Panther, Microsoft Sentinel, Splunk) along with associated data stores (e.g., Snowflake, other cloud data platforms). - Utilize infrastructure-as-code practices (Terraform, CloudFormation, Pulumi) for SIEM configuration and data pipeline management. - Create dashboards, metrics, and reporting tools that provide clear visibility into security posture, telemetry coverage, and operational health. - Oversee data retention, tiering, and cost management for security data in cloud-native environments. - Produce and update documentation, runbooks, and architecture decision records (ADRs) for pipeline integrations and platform configurations.