Strengthen Sporty’s security monitoring and detection capability by managing, tuning, and continuously improving EDR and SIEM platforms. Ensure security alerts are accurate, actionable, and provide reliable visibility across endpoints, servers, cloud infrastructure, and corporate systems
Administer, maintain, and monitor EDR and SIEM environments
Tune detection rules, correlation logic, and security policies to improve detection quality and reduce false positives
Configure and maintain endpoint policies, agent health, log collection, and platform integrations
Develop and maintain dashboards, reports, alerts, and security use cases
Investigate noisy or ineffective detections and continuously improve alert fidelity
Validate that endpoint protection, log collection, and response capabilities operate as expected
Integrate new log sources and improve visibility across endpoints, servers, cloud services, and network infrastructure
Convert findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into improved monitoring content
Monitor platform health, storage, agent connectivity, licensing, and overall service availability
Support the Information Security team during security investigations by improving visibility, detections, and response workflows
Work with Infrastructure and IT teams to onboard new systems into EDR and SIEM
Produce operational documentation, standard operating procedures, and platform runbooks
Track detection coverage, platform performance, and continuous improvement initiatives