3+ years of experience in cybersecurity engineering, data engineering, or related fields.
Hands-on experience with SIEM and cloud data platforms for log management.
Proficient in structured and unstructured data formats like JSON, XML, and CSV.
Strong skills in data ingestion, parsing, normalization, and validation techniques.
Familiarity with Microsoft Azure services, particularly Azure Data Explorer and Log Analytics.
Experience with regular expressions and schema mapping for data processing.
Ability to troubleshoot data pipeline issues and ensure data quality.
Responsibilities
Design and maintain scalable data pipelines for security telemetry.
Onboard various log sources including network, endpoint, and cloud technologies.
Parse and enrich log data using multiple formats and validation techniques.
Collaborate with cross-functional teams to establish data flows.
Verify the integrity and accuracy of security telemetry for incident response.
Conduct assessments to identify telemetry gaps and recommend improvements.
Develop comprehensive documentation for data onboarding and pipeline configurations.
Benefits
Remote work flexibility.
Opportunities for professional development and training.
Collaborative work environment with global teams.
Access to cutting-edge technology and tools.
Support for work-life balance.
Full Job Description
Job Description This is a remote position.
How You Will Make An Impact
Design, develop, and maintain scalable pipelines that ingest security telemetry into SIEM and cloud analytics platforms.
Onboard network, endpoint, identity, application, infrastructure, and cloud log sources.
Parse, normalize, transform, and enrich structured and unstructured log data using regex, JSON, XML, CSV, schema mapping, and validation techniques.
Partner with application owners, infrastructure teams, cloud teams, vendors, and cybersecurity stakeholders to establish complete end-to-end data flows.
Verify the completeness, accuracy, timeliness, and integrity of security telemetry used for monitoring and incident response.
Align onboarded data with enterprise schemas, naming conventions, governance standards, and downstream analytics requirements.
Collaborate with SOC and detection engineering teams to ensure data sources support investigation and threat-detection use cases.
Conduct telemetry gap assessments and recommend data-source priorities that improve cybersecurity coverage.
Develop documentation covering source requirements, data mappings, pipeline configurations, onboarding procedures, and support processes.
Improve automation and reusable ingestion frameworks to make onboarding more efficient, scalable, and cost-effective.
Monitor pipeline health, throughput, reliability, and consumption costs.
Support scripting and infrastructure-as-code practices used to deploy and maintain security data integrations.
Ensure logging and retention practices support regulatory, audit, compliance, and data-integrity expectations.
Requirements
Do You Bring Proven Success in Security Data Engineering and Log Pipeline Development?
At least three years of relevant experience in cybersecurity engineering, data engineering, security operations, log management, or a related technical discipline.
Hands-on experience onboarding, managing, and validating log sources within SIEM, security analytics, or cloud data platforms.
Experience with Microsoft Azure services such as Azure Data Explorer, Azure Monitor, or Log Analytics.
Strong understanding of security data ingestion, parsing, normalization, transformation, enrichment, and validation.
Proficiency handling structured and unstructured formats, including JSON, XML, CSV, and raw text logs.
Practical experience using regular expressions and schema-mapping techniques.
Familiarity with telemetry generated by network, endpoint, identity, cloud, infrastructure, and application technologies.
Ability to troubleshoot pipeline failures, ingestion delays, missing events, schema inconsistencies, and data-quality issues.
Familiarity with query languages used to investigate and validate security telemetry; Kusto Query Language experience is strongly preferred.
Experience using Python, PowerShell, or comparable scripting and automation technologies is preferred.
Understanding of logging requirements involving retention, auditability, regulatory compliance, and data integrity.
Ability to coordinate technical onboarding activities involving multiple teams, vendors, and stakeholders.
Strong attention to detail, accountability, problem-solving ability, and commitment to data quality.
Experience with threat detection, incident response, vulnerability management, cloud security, or broader SOC operations is advantageous.
Strong written and verbal communication skills with the ability to work effectively across global teams.
