Lead SIEM and security monitoring engineering: administer and optimize SIEM, onboard/normalize telemetry, develop and tune detections (EDR, WAF/CDN), reduce false positives, maintain monitoring baselines and documentation, support NIST/CIS configuration baselines, oversee security engineering staff, and coordinate with SOC/NOC for operational visibility and telemetry validation.

Lead and operate an enterprise vulnerability management program: analyze scan results, prioritize risks, coordinate remediation across stakeholders, produce executive reporting, integrate findings into POA&M and compliance workflows, and drive closure of critical vulnerabilities.