> Markdown version of [/jobs/ext/2160437-security-data-engineer](https://www.wearedevelopers.com/jobs/ext/2160437-security-data-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Data Engineer - **Company:** Boston Consulting Group - **Location:** Atlanta, GA, United States - **Salary:** $121,000.0 - $141,000.0 - **Contract:** Permanent contract - **Skills:** Program Optimization, Cyber Security, Information Engineering, Information Model, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Datadog, Data Logging, Data Ingestion, Splunk, Data Pipelines, Api Management - **Published:** August 21, 2026 - **Apply:** https://www.dice.com/job-detail/a3e217e0-7d62-4535-87da-84c5c73bfed4 ## About the Role Experience designing, implementing, and optimizing enterprise security telemetry pipelines using SIEM and related security platforms. * Deep knowledge of Splunk Enterprise Security, including data onboarding, Common Information Model (CIM) normalization, Enterprise Security content, and platform optimization. * Strong understanding of data ingestion architectures, field normalization, retention strategies, and telemetry quality management. * Experience leading technical workstreams and build on engineering standards across security data onboarding and platform operations. * Familiarity with modern observability and telemetry pipeline technologies, such as Observo, Datadog, or similar platforms, and an understanding of how they complement enterprise SIEM architectures. * Ability to collaborate across Security Operations, Detection Engineering, Engineering, and Infrastructure teams to deliver scalable, reliable security telemetry. * A pragmatic, engineering-led approach to balancing data quality, platform performance, detection effectiveness, and operational cost. * Deep expertise in Python in the context of Data Engineering ## Description We are continuing to build a continuous monitoring & detection programme and need a Splunk Engineer to be a part of the technical foundation of it. This is not a maintenance role - you will be the person who shapes how we collect, normalise, document and operationalise security telemetry across the organisation. You will work directly with the Continuous Monitoring & Detection function to ensure every detection rule has a validated, high-fidelity data source behind it. You will work on the ingestion pipeline, the health of our log sources, and the quality of the data our CSIRT depends on to detect and investigate threats. We operate a tiered ingestion model - we do not ingest everything. You will need to understand why data decisions are made, not just how to implement them. This role sits at the intersection of data engineering and security operations. The right person cares deeply about data quality and understands that a broken pipeline is a security risk, not just an IT problem. What You Will Do As a Security Data Engineer, you will help build and evolve the telemetry foundation that enables BCG's global Continuous Monitoring & Detection capability. Working within Security Operations, you will ensure security data is collected, normalized, and delivered with the quality, consistency, and reliability required to support effective threat detection and incident response. * You will partner closely with Detection Engineering, Security Engineering, and Logging Standards to develop scalable data pipelines, improve telemetry health, and guide the technical direction of security data onboarding. In addition to hands-on engineering, you will provide technical leadership across workstreams, mentor colleagues, and help establish engineering standards that improve the resilience and effectiveness of the security monitoring platform. * Design, implement, and optimize security telemetry pipelines that deliver high-quality, detection-ready data into Splunk Enterprise Security. * Partner with Detection Engineering to translate detection use case requirements into telemetry onboarding, normalisation and data quality improvements * Lead the onboarding, normalization, and validation of new log sources, ensuring alignment with Common Information Models and enterprise logging standards. * Develop and maintain performant data ingestion architectures using Splunk forwarders, HTTP Event Collector (HEC), API integrations, and related technologies. * Partner with Detection Engineers to ensure security telemetry supports accurate, scalable, and high-confidence detection engineering. * Monitor and improve data quality, ingestion health, pipeline performance, and telemetry reliability through proactive engineering and operational metrics. * Lead technical workstreams that enhance data onboarding, platform optimization, and security telemetry governance while mentoring engineers through implementation and best practices. * Optimize ingestion strategies, retention policies, and data lifecycle management to balance detection coverage, platform performance, and operational cost. * Evaluate and integrate modern telemetry and data pipeline technologies, including platforms such as Observo and Datadog, where they strengthen security monitoring capabilities and operational efficiency., You will join BCG's Security Operations team and work closely with colleagues across Cybersecurity to strengthen the data foundations that support the firm's Continuous Monitoring & Detection capability. This role partners regularly with Detection Engineering, Security Engineering, Logging Standards, Infrastructure, and other technology teams to ensure security telemetry is reliable, scalable, and detection ready. You'll collaborate across technical disciplines to improve data quality, guide telemetry onboarding, and enable security teams to detect, investigate, and respond to threats with confidence. Through technical leadership, mentoring, and cross-functional partnership, you'll help evolve the engineering practices that underpin BCG's security monitoring platform. ## Related Videos - [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) - [Software Engineering Social Connection: Yubo’s lean approach to scaling an 80M-user infrastructure](https://www.wearedevelopers.com/videos/1583-software-engineering-social-connection-yubo-s-lean-approach-to-scaling-an-80m-user-infrastructure) ## Related Articles - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 168: Hacking Postgres, Blocking Meta and Fixing CSS](https://www.wearedevelopers.com/magazine/588-dev-digest-168-hacking-postgres-blocking-meta-and-fixing-css)