Cybersecurity Data Engineer
SPECIAL AEROSPACE SECURITY SERVICES INC Fort Meade, Maryland, United States
Defense & Space · 11-50 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Cybersecurity Data Engineer will configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem to support high-volume operations. They will also design scalable ETL pipelines and collaborate with various cyber teams to maintain data integrity and detection logic.
What they look for
Requirements
Candidates must possess a TS clearance and have experience with the Elastic suite, data pipeline automation, and security log analysis. Proficiency in Python, Bash, and familiarity with cloud environments or Kafka is highly desirable.
Full description
Cybersecurity data engineer
- Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
- Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
- Develop transformations and enrichments for diverse security log and telemetry sources.
- Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
- Implement data validation, deduplication, and quality controls to ensure data integrity.
- Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
- Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
- Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
- Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
- Maintain technical documentation, SOPs, and engineering artifacts
- 3 days on site at ALC, Adelphi MD
- TS clearance
- Nice to have:• Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
- Experience working with Ruby.
- Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
- Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
Similar roles
-
Cybersecurity Operations Senior
DEFEND Limited Christchurch, Canterbury, New Zealand
-
Research Engineer, Cybersecurity RL
Anthropic San Francisco, California, United States · $500K–$850K/yr
-
Cybersecurity & Information Assurance Specialist — Federal Health IT
Rackner United States
-
Senior Security Engineer
Beca Auckland, Auckland, New Zealand
-
Security Engineer (Corporate IT)
Resolution Berkeley, California, United States · $208K–$930K/yr
-
Cyber Security Engineer, Asssistant Vice President
State Street Bengaluru, Karnataka, India