Senior Technical Lead – Data Engineer (Cybersecurity)

Workplace Type: OnsiteJob Location- Bellevue, Washington / Overland Park, Kansas Employment Type- Contract

Experience: 10+ years in Cybersecurity

Job Summary: We are seeking experienced Senior Data Engineers to lead the design, development, and implementation of scalable data ingestion and transformation pipelines for cybersecurity telemetry. The role involves managing data flows from 100+ existing and new data sources, ensuring secure, reliable, and efficient data movement across security analytics platforms. The ideal candidate will have strong experience with Cribl, Vector, Splunk, Datadog, or similar data pipeline platforms, along with proficiency in Python, JavaScript, or Groovy.

Key Responsibilities: Design and implement scalable, modular, and reusable data ingestion pipelines using Cribl, Vector, and other data pipeline platforms. Integrate and process security telemetry from multiple sources, including Syslog, Kafka, HTTP, Event Hubs, and Blob Storage. Develop reusable ingestion frameworks and templates for consistent data processing. Implement data parsing, filtering, enrichment, dynamic routing, and format conversions. Apply the Open Cybersecurity Schema Framework (OCSF) for security event normalization and schema validation. Develop custom transformations using Python, JavaScript, Groovy, or similar scripting languages. Ensure secure data transfer, data quality, traceability, and end-to-end data lineage. Monitor pipeline performance, troubleshoot failures, and minimize data loss and duplication. Integrate data with downstream platforms such as Splunk, Snowflake, Azure Data Explorer (ADX), and Log Analytics. Collaborate with cybersecurity, analytics, and platform teams to support threat detection, compliance, and security analytics.

Required Qualifications: 10+ years of experience working in cybersecurity.5+ years of experience with Cribl, Vector, Datadog, Splunk, or similar data pipeline platforms.5+ years of experience with Python, JavaScript, Groovy, or other scripting languages. Strong experience in data ingestion, transformation, parsing, enrichment, and routing. Experience handling large-scale security telemetry and multiple log sources. Understanding of secure data processing, schema normalization, and data governance.