Senior Technical Lead – Data Engineer (Cybersecurity)

Job Title

Senior Data Engineer – Cybersecurity

Workplace Type- Onsite

Job Location- Bellevue, Washington / Overland Park, Kansas

Employment Type- Contract

Experience: 10+ years in Cybersecurity

Job Summary

We are seeking experienced Senior Data Engineers to lead the design, development, and implementation of scalable data ingestion and transformation pipelines for cybersecurity telemetry. The role involves managing data flows from 100+ existing and new data sources, ensuring secure, reliable, and efficient data movement across security analytics platforms.

The ideal candidate will have strong experience with Cribl, Vector, Splunk, Datadog, or similar data pipeline platforms, along with proficiency in Python, JavaScript, or Groovy.

Key Responsibilities

• Design and implement scalable, modular, and reusable data ingestion pipelines using Cribl, Vector, and other data pipeline platforms.
• Integrate and process security telemetry from multiple sources, including Syslog, Kafka, HTTP, Event Hubs, and Blob Storage.
• Develop reusable ingestion frameworks and templates for consistent data processing.
• Implement data parsing, filtering, enrichment, dynamic routing, and format conversions.
• Apply the Open Cybersecurity Schema Framework (OCSF) for security event normalization and schema validation.
• Develop custom transformations using Python, JavaScript, Groovy, or similar scripting languages.
• Ensure secure data transfer, data quality, traceability, and end-to-end data lineage.
• Monitor pipeline performance, troubleshoot failures, and minimize data loss and duplication.
• Integrate data with downstream platforms such as Splunk, Snowflake, Azure Data Explorer (ADX), and Log Analytics.
• Collaborate with cybersecurity, analytics, and platform teams to support threat detection, compliance, and security analytics.

Required Qualifications

• 10+ years of experience working in cybersecurity.
• 5+ years of experience with Cribl, Vector, Datadog, Splunk, or similar data pipeline platforms.
• 5+ years of experience with Python, JavaScript, Groovy, or other scripting languages.
• Strong experience in data ingestion, transformation, parsing, enrichment, and routing.
• Experience handling large-scale security telemetry and multiple log sources.
• Understanding of secure data processing, schema normalization, and data governance.

Preferred Qualifications

• Experience with OCSF and security event normalization.
• Knowledge of Kafka, Syslog, HTTP, and cloud-based data ingestion.
• Experience with Snowflake, Splunk, ADX, or Log Analytics.
• Strong troubleshooting, architecture, and technical leadership skills.

Interested candidates

Please share your updated resume along with your relevant experience in cybersecurity data engineering, pipeline platforms, and scripting technologies.