Core Competencies
Expertise
Security-focused data modeling and telemetry engineering, backed by 15+ years shipping hardened production systems across finance, airline, and regulated-enterprise environments.
Cribl & Log Pipeline Engineering
Designing and operating the data models that decide what raw data is retained, indexed, and forwarded to Splunk for SIEM and analytics.
- • Cribl data modeling, ingestion, parsing & routing
- • Enrichment & pipeline design and implementation
- • Splunk integration & cost-optimized pipelines
Enterprise Security
Defending data and telemetry estates from ingestion to detection, with a focus on regulated environments.
- • SIEM (Splunk), XDR, threat detection & IR support
- • Vulnerability management, DLP & endpoint security
- • Linux-based security sensors & defensive security
Automation & Scripting
Turning repeatable security and operations work into self-service automated systems.
- • Python & Bash for pipeline & detection automation
- • API integrations & workflow orchestration
- • Log parsing, alerting & real-time monitoring
Standards & Frameworks
Conducting NIST- and CIS-based security assessments and mapping controls to regulatory requirements.
- • NIST CSF & NIST 800-series, CIS Benchmarks
- • IRS 1075, CMS MARS-E, CJIS
- • Data classification, retention & access standards
Data Engineering
Data modeling, ETL/ELT, metadata management, and streaming analytics at scale.
- • ETL/ELT & real-time pipelines
- • Metadata management & capacity/retention planning
- • Observability data platform design (Dynatrace, Grafana)
Platforms & Operating Systems
Working across the tools and infrastructure that power modern enterprises.
- • Linux (hardening & security config), Windows
- • Splunk, Grafana, Dynatrace, ExtraHop RevealX
- • Azure & AWS