Security Engineer

CareerCircle
San Francisco, CA, United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Compensation
$117,000.0 - $184,200.0
Working hours
Regular working hours

Tech stack

Microsoft Windows Application Programming Interfaces (APIs) Artificial Intelligence Data Analysis Antivirus Softwares Microsoft Azure Border Gateway Protocol Software as a Service Cloud Computing Cloud Computing Security Cloud Engineering Configuration Management
+46 more
Software Documentation Cyber Security Information Engineering Data Governance Information Leak Prevention Extract Transform Load (ETL) Data Retention Data Security Digital Forensics Dynamic Multipoint Virtual Private Networks Enhanced Interior Gateway Routing Protocol Identity and Access Management Information Lifecycle Management Network Security Metadata Network Segmentation Open Shortest Path First (OSPF) Windows PowerShell Salesforce.Com Security Information and Event Management Software Engineering SQL Databases Data Streaming TCP/IP Virtual Local Area Networks Data Logging Scripting Google Cloud Data Classification System Availability Software Security Technical Debt Firewalls (Computer Science) Infrastructure as Code (IaC) Data Lakes Information Technology Bicep Operational Systems Data Management Fortinet Terraform Cyber Warfare Data Pipelines Servicenow Static Application Security Testing Dynamic Application Security Testing

Job description

Network Segmentation Software Documentation Service Level Management Product Family Engineering Google Cloud Platform (GCP) Extract Transform Load (ETL) Infrastructure as Code (IaC) Continuous Improvement Process Identity And Access Management Security Information And Event Management (SIEM), We are seeking a CD&A Engineer - Specialist to design, engineer, and operate security data pipelines and cloud infrastructure supporting enterprise-scale analytics and detection platforms. This role focuses on ETL engineering using Cribl and infrastructure-as-code (IaC) across Google Cloud and Azure, enabling reliable, scalable, and cost-effective ingestion and processing of security telemetry., Security Data Engineering & ETL (Cribl)

  • Engineer and operate Cribl pipelines to ingest, parse, enrich, route, and transform high-volume security telemetry.
  • Optimize data flows for performance, reliability, and cost efficiency across security analytics platforms, including SIEM, XDR, and data lakes.
  • Implement and enforce data standards for normalization, metadata enrichment, and data quality validation.
  • Support onboarding of new security data sources and continuous improvement of existing pipelines., * Design, deploy, and maintain cloud infrastructure using Infrastructure as Code (IaC) across Azure and Google Cloud.
  • Manage infrastructure for security data platforms, ingestion services, and supporting components using Terraform, ARM/Bicep, or equivalent tooling.
  • Ensure infrastructure deployments are consistent, repeatable, and auditable across environments (development, test, production).
  • Partner with cloud and platform teams to align infrastructure with enterprise security, networking, and governance standards.

Platform Reliability, Observability & Operations

  • Ensure availability, scalability, and resilience of security data pipelines and supporting infrastructure.
  • Implement monitoring, alerting, and operational metrics for ETL and ingestion services.
  • Participate in incident response and root cause analysis related to data pipeline or infrastructure issues.
  • Proactively identify and remediate performance bottlenecks and operational risks.

Automation & Continuous Improvement

  • Drive automation for infrastructure provisioning, pipeline deployment, and configuration management.
  • Contribute to roadmap planning, technical debt reduction, and operational maturity initiatives.
  • Develop and maintain documentation, standards, and runbooks for data pipelines and infrastructure.
  • Promote reuse and standard patterns across CD&A engineering.

Collaboration & Governance

  • Work closely with Cyber Defense (CFC/SOC), XDR/SIEM engineers, Cloud Security, Platform Engineering, and Compliance teams.
  • Support audit, compliance, and data retention requirements impacting security telemetry.
  • Provide technical input into architecture decisions, onboarding reviews, and platform changes., TEKsystems Honolulu, HIRemote On Prem Auditing Operations Leadership Salesforce ServiceNow Mitigation Communication Risk Analysis Cyber Security Prioritization Security Tools Time Management Technical Acumen Influencing Skills Strategic Planning Business Valuation Financial Services Security Solutions Application Security Technology Ecosystems Full Stack Development Artificial Intelligence Business Transformation Security Recommendations Critical Illness Insurance Software As A Service (SaaS) Business Continuity Planning Application Programming Interface (API) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Payment Card Industry (PCI) Data Security Standards Health Insurance Portability And Accountability Act (HIPAA) Compliance +0 Security Engineer TEKsystems Kansas City, MORemote Scripting Operations Leadership Automation Governance Encryption Data Privacy Communication Investigation Data Security Collaboration Microsoft 365 ISO/IEC 27001 Cyber Security Risk Management Microsoft Azure Problem Solving Access Controls Data Governance Microsoft Teams Compliance Risk Computer Science Security Controls Digital Forensics Windows PowerShell Business Valuation Cloud Applications Policy Enforcement Information Privacy Data Classification Electronic Discovery Data Loss Prevention Packaging And Labeling Full Stack Development Artificial Intelligence Business Transformation Data Protection Strategy SQL (Programming Language) Critical Illness Insurance Software As A Service (SaaS) Microsoft Defender Antivirus Information Lifecycle Management General Data Protection Regulation (GDPR) Health Insurance Portability And Accountability Act (HIPAA) Compliance +0 Firewall Engineer TEKsystems Edison, NJ*Remote TCP/IP Firewall Fortinet Operations Leadership Communication Problem Solving Network Security Business Valuation Root Cause Analysis Full Stack Development Artificial Intelligence Business Transformation Border Gateway Protocol Cyber Security Standards Critical Illness Insurance Standard Operating Procedure VxLAN (Virtual Extensible LAN) Open Shortest Path First (OSPF) Troubleshooting (Problem Solving) Virtual Local Area Network (VLAN) Enhanced Interior Gateway Routing Protocols Dynamic Multipoint Virtual Private Networks

Requirements

Planning Metadata Terraform Automation Governance Innovation Resilience Compassion Scalability Reliability Data Quality Observability Cyber Defense Cyber Security Data Pipelines Technical Debt Cloud Security Data Retention Microsoft Azure Team Leadership Telephone Skills Data Engineering Cyber Operations Incident Response Cloud Engineering Application Design Root Cause Analysis Development Testing Compliance Auditing Enterprise Security Cloud Infrastructure, * Bachelor’s degree

  • Minimum 4 years of experience in security data engineering, cloud engineering, or platform engineering roles.
  • Hands-on experience with Cribl or equivalent security data pipeline / ETL tooling.
  • Strong experience building and managing infrastructure using IaC (Terraform, ARM/Bicep, or similar).
  • Practical experience with Google Cloud and/or Azure.
  • Solid understanding of security telemetry, logging, and data lifecycle concepts.
  • Experience operating platforms in large, enterprise-scale environments.

Required Skills: Certificate Services, Cloud Security, Cybersecurity Analytics, Cybersecurity Operations, Delivery of Security Applications, Design Applications, Identity Access Management (IAM), Incident Response, Information Security, Network Segmentation, Operational Technology (OT) Security, Security Analytics, SLA Management, System Designs, Team Leadership, Technical Advice, Valid Driving License

Benefits & conditions

We are proud to be a company that embraces the value of bringing together, talented, and committed people with diverse experiences, perspectives, skills and backgrounds. The fastest way to breakthrough innovation is when people with diverse ideas, broad experiences, backgrounds, and skills come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively.

Learn more about your rights, including under California, Colorado and other US State Acts

The salary range for this role is $117,000.00 - $184,200.00

About the company

Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on careercircle.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:17 min

Fortinet firewall administrative passwords leaked on the dark net

Chris Heilmann +1 · LIVE

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

2:56 min

Provisioning a secure container infrastructure with Bicep

Matthias Falkenberg +1 · WWC 2022

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · WWC 2022

1:33 min

Recapping vital capability shifts across security and enterprise infrastructure

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

Videos

See all

Related articles

See all