What You'll Bring 6+ years in a technical, customer-facing role (TAM, Customer Engineer, Senior Support, or similar). Hands-on experience with SIEM or observability platforms, Splunk, Elastic/ELK, Microsoft Sentinel, or equivalent. You've actually used these tools for incident investigation, threat hunting, or application troubleshooting, not just sold them. Strong cloud fundamentals across AWS, Azure, and/or GCP Infrastructure-as-Code experience (Terraform or similar). Scripting skills in Python and/or Bash Comfortable troubleshooting distributed systems, data pipelines, and query performance. Equally fluent talking to engineers and executive stakeholders. Startup or high-growth experience, you know how to move fast and make calls without a perfect playbook. You make progress where others stall. You navigate ambiguity with curiosity, not paralysis. You know when to go heads-down and when to loop in the right person, and you do it without being asked.