Designs, deploys, administers, and optimizes Splunk environments across on-premises and cloud platforms. Builds dashboards, alerts, reports, data integrations, and monitoring solutions; automates onboarding and parsing with scripts; supports DevOps observability, security compliance, network visibility, and threat detection. Troubleshoots ingestion and visualization issues, manages clustering and access controls, and integrates third-party applications.

Investigates escalated security incidents, performs threat hunting and root-cause analysis, analyzes security logs and indicators of compromise, develops and tunes SIEM detections, reduces false positives, coordinates incident response, documents investigations, supports compliance, and mentors L1 analysts.

Build and manage observability solutions using Datadog and Splunk across applications, cloud infrastructure, APIs, and Kubernetes. Develop dashboards, alerts, reports, SPL queries, and distributed tracing capabilities. Troubleshoot production incidents, conduct root cause analysis, and improve system reliability in collaboration with DevOps, SRE, application, and infrastructure teams. Automate monitoring tasks using Python, Bash, and Terraform.