Cybersecurity data engineer
- Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
- Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
- Develop transformations and enrichments for diverse security log and telemetry sources.
- Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
- Implement data validation, deduplication, and quality controls to ensure data integrity.
- Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
- Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
- Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
- Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
- Maintain technical documentation, SOPs, and engineering artifacts
- 3 days on site at ALC, Adelphi MD
- TS clearance
- Nice to have:
- Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
- Experience working with Ruby.
- Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
- Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.