Sr. Threat Detection & Automation Engineer (with focus on Data Engineering)

We are looking for a highly motivated Security Automation Engineer with experience in Data Engineering to join NM’s Security Automation & Data Analytics team. As a member of our team, you will play a pivotal role in designing, building and maintaining continuous and sustainable automated pipelines with the goal of enhancing the efficiency, effectiveness and accuracy of cybersecurity teams’ capabilities reducing manual tasks for the IRC teams and enable data-driven cybersecurity operations. This role requires a mix of modern data engineering practices, experience in database structures and tooling, coding, cloud development, and security domain expertise., * Design, develop, and maintain scalable data pipelines, datasets, and analytics products supporting IRC department’s reporting and analytics capabilities.

• Develop and maintain enterprise-ready ETL/ELT processes and data transformation frameworks to support data-driven initiatives.
• Design, build and support cloud-based data pipelines and data lake architectures using software and data engineering best practices.
• Ensure data quality, lineage, integrity, and governance standards are implemented throughout the data lifecycle.
• Optimize and troubleshoot existing data pipelines for performance and reliability, ensuring data quality and integrity across various data sources.
• Identify opportunities to automate workflows/processes and improve efficiency across cybersecurity teams through SOAR playbooks and Kubernetes-hosted and/or cloud-hosted pipelines.
• Assist with the design, engineering, deployment, and maintenance of custom automation tools (primarily in Python and PowerShell)
• Develop integrations with security tools and APIs.
• Evaluate and implement emerging technologies to improve cybersecurity and analytics capabilities
• Assist with the development and support of dashboards, metrics, and monitoring alerts related to the team’s and the department’s operations.
• Develop and maintain documentation related to the team’s automated workflows/products.
• Partner with data scientists, analysts, engineers, and other stakeholders to identify requirements and deliver high-quality solutions and insights.
• Provide mentorship and coaching to junior team members, fostering skill development and encouraging continuous learning.

Automation Engineering, Data Analysis, Automation, Internet Security, Automation Engineering, Cloud Computing, Database Technology, Machine Tool, IRC (Internet Relay Chat), Data Management, * 5+ years of professional development experience using SQL and Python.

• 5+ years of professional experience building data pipelines (batch and/or streaming) and data governance practices.
• Hands-on experience with modern data warehouses and large-scale data platforms (Databricks Preferred); comfortable working across large-scale, structured and unstructured data.
• Deep understanding of database structures principles and best practices
• Deep understanding of data modeling, ETL/ELT design, data engineering best practices, including data integration patterns, replication, event streaming, and pipeline performance tuning.
• Hands-on experience with security automation and orchestration tools and/or software development technologies.
• Comfortable with REST API best practices and usage.
• Hands-on experience deploying content and/or systems through CI/CD environments, and tooling such as GitLab, GitLab CI, Terraform, Ansible, Kubernetes etc.
• Hands-on experience with AWS and cloud services configuration and development.
• Excellent written and verbal communications skills.
• Ability to communicate with technical and non-technical audiences.

Preferred Skills:

• Bachelor’s degree in computer science, Cybersecurity, Computer Engineering, Data Engineering, Software Engineering, or related fields

• Relevant industry certifications are preferred, such as AWS Certified Data Engineer - Associate Databricks, Certified Data Engineer Associate, or Databricks Certified Data Engineer Professional, demonstrating expertise in modern cloud-based data engineering, analytics, and data platform technologies.

• Experience with Databricks
• Experience with SOAR and SIEM platforms.
• Practical experience with automation techniques using PowerShell, Bash, JavaScript, API calls, and regular expressions
• Additional coding experience in one or more programming languages - Java, C++, Go
• ServiceNow development experience
• Experience with network and/or systems administration
• Experience working in Security Operations, Incident Response, or Penetration Testing
• Hands-on experience with security technologies such as firewalls, IDR/IPS, EDR, IAM principles and others.

Skills you have:

• Adaptive Communication - Adaptive Communication: Formulates strategies to be used to convey complex information about services, products, systems, or processes to targeted audiences; communicates and liaises between technical and non-technical audiences.
• Data Architecture - Data Architecture: Designs and maintains the structure of logical and physical data assets and data management resources; develops and governs policies and processes for data collection, storage, arrangement, integration, and usage of data.
• Data ETL - Data ETL: Extracts, transforms, and loads data from multiple sources to a data warehouse or unified data repository.
• Databases & Data Platforms - Databases & Data Platforms: Utilizes knowledge of databases to access, manage, and update information, typically containing aggregations of data records or files; includes understanding of different types of databases.
• Engineering Expertise & Practices - Engineering Expertise & Practices: Applies specialized experiences in different facets of engineering, including data, applications, cyber, systems, operations, product, security, and testing, along with technical aptitude to adapt new expertise as they become relevant through an understanding of underlying engineering principles.
• Programming Languages - Programming Languages: Demonstrates proficiency in one or more programming languages to execute activities, tasks, practices, and deliverables associated with writing and modifying programs and scripts that comprise an application system; designs, codes, tests, and installs complex computer programs and maintains detailed documentation of programming tasks.
• SQL - SQL: Applies clear, logical codes for small and large-scale projects using the language constructs and object-oriented approach of SQL to manage data in a database management system., SQL Databases, Data ETL (NM), Programming Languages, Data Architecture (NM), Adaptive Communication, Databases & Data Platforms (NM), Engineering Expertise & Practices (NM)

Northwestern Mutual is an equal opportunity employer that welcomes talented individuals of all backgrounds. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives., We’re excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and our commitment to a culture of belonging., Powered by SonicJobs (an advertiser on Monster). By applying, you consent to share your data with SonicJobs and the employer. Monster or SonicJobs does not store or use your application data beyond facilitating the application. See Northwestern Mutual Privacy Policy at https://www.northwesternmutual.com/online-privacy-statement/ and SonicJobs Privacy Policy at https://www.sonicjobs.com/privacy and Terms of Use at https://www.sonicjobs.com/terms