Security Data Engineer

Seeking a Senior Data Engineer to design, build, and support scalable cybersecurity data ingestion and transformation pipelines across 100+ security telemetry sources. The role will focus on Cribl/Vector-based ingestion, schema normalization, scripting, secure data movement, and integration with platforms such as Splunk, Snowflake, ADX, and Log Analytics.

• Strong cybersecurity background with security telemetry/log data experience \n

• Hands-on experience with Cribl, Vector, Datadog, Splunk, or similar data pipeline platforms \n

• Strong experience designing scalable data ingestion and transformation pipelines \n

• Experience with Python, JavaScript, Groovy, or similar scripting languages \n

• Experience with Syslog, Kafka, HTTP, Event Hubs, and Blob Storage \n

• Knowledge of OCSF/schema normalization, field mapping, and data transformation \n

• Experience with downstream platforms such as Splunk, Snowflake, ADX, Log Analytics, or Anvilogic \n

• Strong understanding of SSL/TLS, authentication, logging, data governance, lineage, and validation \n

• Experience handling structured and unstructured cybersecurity data at scale \n

n \n

• Architect and implement reusable cybersecurity data ingestion pipelines using Cribl, Vector, and related technologies. \n

• Build ingestion frameworks for multiple security data sources and downstream analytics platforms. \n

• Implement schema normalization, field mapping, filtering, enrichment, routing, and format transformations. \n

• Develop custom transformation logic using Python, JavaScript, Groovy, or similar scripting languages. \n

• Ensure secure, reliable data movement with proper governance, traceability, monitoring, and validation. \n

• Collaborate with security, analytics, and platform teams to support threat detection, compliance, and security analytics use cases.