5-7 years of experience in data engineering or related field
Proficiency in the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet)
Strong skills in Python and Bash for automation
Experience with ETL pipeline design and optimization
Familiarity with data validation and quality control processes
Active TS clearance required
Knowledge of cloud environments (AWS, Azure, GCP) is a plus
Responsibilities
Configure and optimize data ingestion and retrieval within the Elastic ecosystem
Design and maintain scalable cybersecurity ETL pipelines
Develop transformations for diverse security log sources
Implement data validation and quality controls
Automate workflows using Python and Bash
Monitor and troubleshoot data-flow issues
Collaborate with cyber teams to meet operational needs
Benefits
3 days on-site work at ALC, Adelphi MD
Opportunity to work with cutting-edge cybersecurity tools
Engagement with cross-functional teams in a dynamic environment
Potential for professional growth in cloud and cybersecurity domains
Access to technical training and development resources
Full Job Description
Cybersecurity data engineer
Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
Develop transformations and enrichments for diverse security log and telemetry sources.
Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
Implement data validation, deduplication, and quality controls to ensure data integrity.
Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
Maintain technical documentation, SOPs, and engineering artifacts
3 days on site at ALC, Adelphi MD
TS clearance
Nice to have:
Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
