• Lead and mentor a team of engineers responsible for cybersecurity data pipelines, SIEM integrations, and custom data acquisition tools • Oversee development of data parsers, normalization, and enrichment processes aligned to OCSF and other standards • Manage onboarding of third-party data sources via API, including custom app and Lambda development • Support and optimize Splunk SIEM infrastructure and integrations • Design and manage cloud architecture and automation strategies to ensure reliability, scalability, and compliance • Collaborate with threat analytics, detection engineering, and investigations teams to improve alert fidelity and reduce false positives • Ensure systems meet regulatory and audit requirements (SOX, PCI, GDPR, CCPA) • Support internal and external compliance efforts (NIST, ISO 27001, SOC 2) • Engage stakeholders across SOC, ISOs, and business units to understand evolving data needs • Provide Tier 3 support and subject matter expertise during high-severity incidents • Drive DevOps practices including CI/CD, infrastructure as code, and automated testing • Lead sprint planning, delivery tracking, and cross-functional collaboration across time zones