Information Technology Security Engineer

Key Responsibilities
1. Security Observability Architecture
Design and maintain a modern security observability stack leveraging Elastic (ELK/Elastic Cloud), OpenTelemetry, and AWS services (CloudTrail, CloudWatch, GuardDuty, Security Hub).
Develop and optimize log ingestion pipelines using Filebeat, Logstash, Kinesis, Lambda, or Elastic Agent.
Define and maintain data schemas, parsing logic, enrichment, and correlation rules.
2. Log & Telemetry Engineering
Build scalable log‑collection architectures across AWS workloads, microservices, containers, and endpoints.
Implement automated log normalization, tagging, and metadata strategies for better analytics and searchability.
Ensure availability, data retention, and performance of the observability platform.
3. Threat Detection & Analytics
Create detection rules, dashboards, and visualizations in Elastic SIEM/Kibana.
Integrate AWS findings (GuardDuty, Macie, Inspector) into central observability dashboards...