Lead Consultant - Platform Engineering
Core
Lead the engineering, administration, and optimization of enterprise-scale security telemetry platforms (Cribl and Microsoft Sentinel) to ensure performance, resilience, and SLA delivery across global regions.
Role type
Senior IC Platform Engineering Lead (Security Telemetry & SIEM)
Builds
Secure telemetry pipelines, SIEM configurations, detection rules, dashboards, and automation workflows for monitoring and incident response.
Domain
Cybersecurity, Security Operations Center (SOC), Telemetry Management, SIEM
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Cribl platform administration, Microsoft Sentinel configuration, KQL query development, telemetry pipeline engineering, security automation, incident management, change management, compliance governance, Python/PowerShell scripting, cloud security, identity security, network security.
Preferred skills
Microsoft Defender for Endpoint, SIEM migration, NIST CSF, ISO 27001, CIS Controls, SOX, GxP, security certifications.
Technologies
Cribl, Microsoft Sentinel, KQL, PowerShell, Python, Microsoft Defender for Endpoint, Cloud platforms, ITSM tools.
Responsibilities
Configure and operate Cribl and Microsoft Sentinel at enterprise scale; engineer telemetry routing, parsing, transformation, and enrichment pipelines; manage SIEM connectors, analytics, dashboards, and access controls; lead incident, problem, and change management activities; define service models and security standards; mentor engineers and analysts; evaluate AI/ML for security automation and anomaly detection.
Seniority
Senior, hands-on IC with leadership responsibilities