> Markdown version of [/jobs/ext/4679721-cyber-data-engineer-glasgow](https://www.wearedevelopers.com/jobs/ext/4679721-cyber-data-engineer-glasgow). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Data Engineer- Glasgow

- **Company:** FDM Group
- **Location:** London, United Kingdom
- **Salary:** £51,605
- **Contract:** Temporary to permanent
- **Skills:** Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, JIRA, Microsoft Azure, Configuration Management, Cyber Security, Computer Networks, Linux, DevOps, Elasticsearch, Hypertext Transfer Protocols (HTTP), Python (Programming Language), Performance Tuning, Regular Expressions, Software Tools, Cloud Services, Logstash, Ansible, Systems Integration, GitHub Copilot, Claude Code, Git, Data Lakes, Infrastructure Automation Frameworks, AWS Data Analytics, Build Tools, Splunk, Software Version Control, Data Pipelines, Jenkins
- **Published:** November 12, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5962883510

## About the Role

* Infrastructure automation and integration experience, ideally using Python and Ansible
 * A solid understanding of Operating Systems and Networking concepts: Linux/Unix system administration, HTTP and encryption.
 * Interest in using AI-assisted engineering tools (e.g. GitHub Copilot, Claude Code) to accelerate delivery
 * Good understanding of software version control, deployment & build tools using DevOps SDLC practices (Git, Jenkins, Jira)
 * Strong analytical and troubleshooting skills
 * Excellent verbal & written communication skills
 * Appreciation of Agile methodologies, specifically Kanban

Desired Skills

 * Prior experience deploying and managing large-scale Elasticsearch platforms in production; Splunk experience is valuable given our ongoing migration
 * Experience with Elastic Stack ingest and pipeline tooling (e.g. Logstash, Beats or equivalent)
 * Elastic Certified Engineer or equivalent Elasticsearch/Elastic Stack certification; Splunk certification is a plus given our ongoing migration
 * Experience with data pipelines on a major Cloud Service Provider like GCP, Azure or AWS Data engineering and configuration experience including writing and testing field extractions/parsers using regular expressions
 * Familiarity with cybersecurity concepts, event types, and monitoring requirements.

## Description

Our client is seeking a Cyber Data Engineer to join its globally distributed security analytics team.

The team is responsible for developing and supporting platforms used by cyber functions including security response, investigations and insider-threat teams. A key focus of the position will be supporting the migration of the firm's cyber data lake from Splunk to CyberELK, an Elasticsearch-based security analytics platform.

This role would suit an engineer with a strong grounding in Python, infrastructure automation, Linux and data pipelines who is interested in developing deeper expertise in Elasticsearch and cybersecurity engineering. Responsibilities A successful applicant will contribute to several important initiatives including:

 * Developing automation tools that integrate with in-house developed configuration management frameworks and APIs, including our AI-assisted onboarding tooling
 * Onboarding data sources into CyberELK with appropriate field extractions and Elastic Common Schema (ECS) mapping
 * Tuning and optimising Elasticsearch cluster performance, including sharding, index lifecycle management (ILM) and ingest pipelines
 * Providing consultancy to internal clients and stakeholders
 * Working as an escalation point to perform complex troubleshooting, working with other infrastructure teams to resolve issues