• Architect, implement, and maintain SIEM solutions with a focus on modern platforms including: • Splunk • Microsoft Sentinel • Elastic • Google SecOps / Chronicle • CrowdStrike NG-SIEM / LogScale • Palo Alto XSIAM • SentinelOne SIEM • Design and manage log ingestion pipelines using tools such as Cribl Stream, Edge, or Search (or similar). • Optimize data routing, enrichment, and filtering to improve SIEM efficiency and cost control. • Collaborate with cybersecurity, DevOps, and cloud infrastructure teams to integrate log sources and telemetry data. • Develop custom parsers, dashboards, correlation rules, and alerting logic for security analytics and threat detection. • Maintain and enhance system reliability, scalability, and performance of logging infrastructure. • Provide expertise and guidance on log normalization, storage strategy, and data retention policies. • Lead incident response investigations and assist with root cause analysis leveraging SIEM insights. • Mentor junior engineers and contribute to strategic security monitoring initiatives.