Skip to main content
David Careers

Senior Technical Lead - Data Engineer (Cybersecurity)

Posted 2 days ago

simarn solutionsBellevue (WA)
Information Security EngineersComputer Systems Design Services

SENIORITY

Lead

Apply (opens in a new tab)

About the role

Job Title Senior Data Engineer – Cybersecurity Workplace Type- Onsite Job Location- Bellevue, Washington / Overland Park, Kansas Employment Type- Contract
Experience: 10+ years in Cybersecurity
Job Summary: We are seeking experienced Senior Data Engineers to lead the design, development, and implementation of scalable data ingestion and transformation pipelines for cybersecurity telemetry. The role involves managing data flows from 100+ existing and new data sources, ensuring secure, reliable, and efficient data movement across security analytics platforms. The ideal candidate will have strong experience with Cribl, Vector, Splunk, Datadog, or similar data pipeline platforms, along with proficiency in Python, JavaScript, or Groovy.
Key Responsibilities: Design and implement scalable, modular, and reusable data ingestion pipelines using Cribl, Vector, and other data pipeline platforms. Integrate and process security telemetry from multiple sources, including Syslog, Kafka, Event Hubs, and Blob Storage. Develop reusable ingestion frameworks and templates for consistent data processing. Implement data parsing, filtering, enrichment, dynamic routing, and format conversions. Apply the Open Cybersecurity Schema Framework (OCSF) for security event normalization and schema validation. Develop custom transformations using Python, JavaScript, Groovy, or similar scripting languages. Ensure secure data transfer, data quality, traceability, and end-to-end data lineage. Monitor pipeline performance, troubleshoot failures, and minimize data loss and duplication. Integrate data with downstream platforms such as Splunk, Snowflake, Azure Data Explorer (ADX), and Log Analytics. Collaborate with cybersecurity, analytics, and platform teams to support threat detection, compliance, and security analytics.
Required Qualifications: 10+ years of experience working in cybersecurity. 5+ years of experience with Cribl, Vector, Datadog, Splunk, or similar data pipeline platforms. 5+ years of experience with Python, JavaScript, Groovy, or other scripting languages. Strong experience in data ingestion, transformation, parsing, enrichment, and routing. Experience handling large-scale security telemetry and multiple log sources. Understanding of secure data processing, schema normalization, and data governance.
Preferred Qualifications:
  • Experience with OCSF and security event normalization.
  • Knowledge of Kafka, Syslog, and cloud-based data ingestion.
  • Experience with Snowflake, Splunk, ADX, or Log Analytics.
  • Strong troubleshooting, architecture, and technical leadership skills.
  • Interested candidates
  • Please share your updated resume along with your relevant experience in cybersecurity data engineering, pipeline platforms, and scripting technologies.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this