Cyber Security Engineer – Data Engineer | W2 only

1. Role Overview

1. Strengthen the Bank’s monitoring, detection, and response capabilities.

2. Build, onboard, and maintain high-quality security data pipelines across cloud and on-premises environments.

3. Partner with application, infrastructure, security, and governance teams.

4. Ensure critical telemetry is collected, normalized, validated, and available for threat detection, incident response, compliance, and cyber risk visibility.

5. Work with large volumes of security telemetry and resolve complex data quality issues.

6. Improve the reliability, scalability, and efficiency of log ingestion and data integration processes.

7. Demonstrate strong technical execution, attention to detail, and collaboration in a highly regulated financial services environment.

2. Role Responsibilities

1. Design, build, and maintain scalable data ingestion pipelines for onboarding security log sources into SIEM and cloud data platforms, including Azure Data Explorer and Log Analytics.

2. Parse, normalize, transform, and enrich structured and unstructured log data using regex, JSON parsing, schema mapping, and data validation.

3. Partner with application owners, infrastructure teams, cloud teams, vendors, and security stakeholders to onboard new log sources and confirm end-to-end data flow.

4. Validate log integrity, completeness, timeliness, and quality to ensure security telemetry is reliable for monitoring, detection, response, and reporting.

5. Align onboarded data with organizational standards, schemas, naming conventions, and data governance requirements to support downstream analytics and automation.

6. Troubleshoot ingestion, parsing, transformation, and pipeline issues across diverse log sources, platforms, and environments.

7. Develop and maintain documentation for log onboarding procedures, data mappings, source requirements, pipeline configurations, and operational support processes.

8. Collaborate with detection engineering and SOC teams to ensure onboarded logs support threat detection, investigation, response, and cyber risk visibility.

9. Conduct telemetry gap analysis to identify missing, incomplete, or underrepresented data sources and recommend onboarding priorities to improve security coverage.

10. Support logging and data collection practices that align with regulatory, audit, compliance, retention, and integrity requirements.

11. Improve ingestion frameworks, automation, and onboarding workflows to increase efficiency, repeatability, scalability, and cost effectiveness.

12. Support infrastructure-as-code, scripting, and automation approaches to streamline deployment and ongoing maintenance.

13. Monitor pipeline performance and partner with stakeholders to optimize ingestion reliability, throughput, and cost efficiency.

14. Stay current on emerging logging standards, telemetry formats, cybersecurity data engineering practices, and cloud security data platform capabilities.

3. Qualifications and Skills

1. Minimum of 3 years of relevant experience in cybersecurity, data engineering, log management, security operations, or a related technology discipline.

2. Hands-on experience onboarding, managing, and validating log sources in SIEM, cloud data platforms, or security analytics environments.

3. Strong understanding of data parsing, normalization, transformation, and validation techniques, including regex, JSON, XML, CSV, and structured and unstructured data handling.

4. Familiarity with common security telemetry sources, including network, endpoint, identity, application, cloud, and infrastructure logs.

5. Experience with cloud platforms and associated logging, monitoring, and analytics services.

6. Strong troubleshooting and problem-solving skills related to data pipelines, ingestion flows, schema issues, and data quality defects.

7. Understanding of compliance and regulatory expectations related to logging, retention, auditability, and data integrity.

8. Experience with scripting or automation tools such as Python, PowerShell, or similar technologies is preferred.

9. Familiarity with query languages used to validate, investigate, and analyze ingested data.

10. Ability to plan, coordinate, and execute onboarding efforts across multiple internal teams, vendors, and stakeholders.

11. Ability to balance operational support responsibilities with project-based delivery and continuous improvement efforts.

12. Strong attention to detail, commitment to data quality, and ownership of outcomes.

13. Experience in broader cybersecurity disciplines, including threat detection, incident response, vulnerability management, or cloud security, is a plus.

14. Ability to work effectively and collaboratively in a global team environment.

15. Strong communication skills, sound judgment, and a high degree of accountability.

Thanks & Regards