Lead and mature threat hunting practice by proactively hunting IOCs across endpoints, network, and cloud. Develop and execute complex searches, produce hunt reports, refine playbooks and detection rules, leverage automation/AI, mentor junior analysts, and integrate threat intelligence to improve client security posture.

Lead and mature detection engineering practice: design, test, and deploy high-fidelity detections across environments using Datadog; expand coverage across endpoint, network, cloud, identity; translate threat models into detections; build runbooks and response workflows; integrate automation and AI.

Monitor and analyze security events in Datadog, identify and investigate incidents, document and evolve incident response procedures, provide technical guidance, troubleshoot configuration/script issues, and work directly with customers on implementations and remote services.