• Designing and implementing secure architectures across cloud environments, embedding zero-trust principles and identity-based access controls. • Managing threat detection, vulnerability assessments, and penetration testing to identify and remediate risks proactively. • Leading incident response and leveraging threat intelligence to detect, contain, and prevent evolving cyber threats. • Ensuring compliance with global security standards (ISO 27001, NIST 800-53, CIS, OWASP, SOC 2, CSA) and continuously improving Collibra’s security posture. • Supporting internal and external security audits by providing necessary documentation and evidence.

• Lead, coach, and develop a growing cybersecurity team • Drive the execution of enterprise cybersecurity initiatives and priorities • Oversee cybersecurity operations, including threat detection, monitoring, and incident response • Partner with business and technology leaders to integrate cybersecurity into key decisions and processes • Support compliance with regulatory, audit, privacy, and industry security requirements

Role Description This project will optimize the agency's CrowdStrike SIEM and related CrowdStrike services to improve threat detection, monitoring, and response capabilities. The contractor will expand and tune telemetry, integrate additional high-value log sources, enhance security dashboards, and support the rollout of additional CrowdStrike services. The effort will increase visibility into endpoint and security risk, improve signal quality and correlation, and provide security leadership with clear insight into security operations effectiveness and overall risk posture. Expected Outcomes - Expanded and optimized CrowdStrike SIEM telemetry coverage - Integration of additional high-value log sources - Improved dashboards for operational and executive visibility - Enhanced detection fidelity and monitoring effectiveness - Clearer insight for leadership into endpoint risk and security operations performance Duties to Be Performed - Assess current CrowdStrike SIEM configuration, telemetry coverage, and log ingestion - Enable and tune additional CrowdStrike telemetry to improve visibility and signal quality - Identify and integrate new high-value log sources into CrowdStrike SIEM - Develop and refine security dashboards aligned to SOC and executive use cases - Assist with technical enablement and rollout of additional CrowdStrike services - Validate data quality, parsing, and correlation within the SIEM - Coordinate with Security Operations, IT Operations, and system owners - Identify gaps, risks, and improvement opportunities in monitoring and detection - Provide weekly status updates and monthly executive-level progress summaries - Deliver supporting documentation and recommendations to sustain improvements Deliverables - Summary of work performed and capabilities delivered - Documentation supporting all telemetry enablement, log integrations, and dashboard implementations - Measurable improvements in monitoring, detection, or visibility - Recommendations for future enhancements or next-phase efforts Qualifications - Demonstrated skill with documentation, reporting, and knowledge transfer - Experience with Stakeholder Engagement and Executive Communication - Experience in SIEM Detection Engineering and Alert Optimization - Experience in Log Source Integration and Data Normalization - Hands-On Experience with CrowdStrike SIEM and Dashboard Development - Hands-On Experience with SIEM and Dashboard Development

• Strengthen DEUNA's security posture as we continue scaling our global payments platform. • Build and operate modern cloud security capabilities that protect millions of payment transactions. • Partner closely with Infrastructure, Engineering, Compliance, and Product teams to improve security maturity. • Own security monitoring, threat detection, and incident response processes. • Build and continuously improve SIEM, detection rules, alerting, and security automation. • Lead vulnerability management, remediation tracking, and risk prioritization. • Drive cloud security initiatives across AWS, Kubernetes, containers, IAM, networking, and secrets management. • Manage endpoint security, identity security, privileged access management, and access reviews. • Coordinate external penetration tests, red team exercises, and security assessments. • Develop security metrics, dashboards, and executive reporting.