The new role is focused on enabling to effectively consume, analyze, and operationalize security logs and telemetry for monitoring, detection, investigation, reporting, and assurance use cases.

Role Context

• Why open: New enterprise cyber data lake rollout.
• Projects: Onboarding teams, analytics enablement, compliance, stakeholder support.
• Typical day: Onboarding, analytics, data quality monitoring.
• Work breakdown: 40% Supporting Teams, 25% Analytics & Reporting, 20% Data Quality & Issue Resolution, 15% Stakeholder Meetings & Collaboration
• Stakeholders: Product teams, engineering, SOC, compliance.
• 90-day success: established strong relationships with key cybersecurity stakeholders, enabled priority teams to effectively use Cyber Data Lake data, and demonstrated measurable improvements in data utilization, reporting, or security monitoring outcomes.

Candidate Profile – Skills & Experience

Top 3 required skills

Required Skill	Tool / Technology / System	Depth	What the candidate must be able to do
Cybersecurity Data & Logging	Databricks, Splunk	Intermediate-Advanced	Help cybersecurity teams find, analyze, and use security logs and telemetry for monitoring, investigations, and reporting
Data Platform Experience	Databricks (preferred), Snowflake	Intermediate-Advanced	Query and analyze large datasets, support data quality, and help users derive actionable insights from cyber data
Stakeholder Enablement	N/A	Intermediate-Advanced	Partner with cybersecurity, engineering, audit, and compliance teams to support data usage, resolve issues, and communicate effectively across technical and non-technical audiences.

 

Top 3 preferred skills

Preferred Skill	Tool / Technology / System	Value to Role	Willing to Flex
Modern data platforms	Databricks, Snowflake	Strong advantage	Yes
Detection engineering exposure	Splunk / SOC tools	Nice-to-have	Yes
Project coordination	N/A	Strong advantage	Yes

Additional Details

• Education: Bachelor’s preferred; equivalent experience accepted.
• Industry: Medical/pharma not required; regulated environment helpful.
• Systems: Databricks data lake, Splunk, analytics tools.
• Personality: Collaborative, strong communicator, detail-oriented, multitasker.

Key Responsibilities

Consumer Enablement & Adoption

• Serve as the primary point of contact for Cyber Data Lake consumers after datasets are available for use.
• Conduct consumer onboarding sessions, workshops, office hours, and stakeholder working sessions to help users discover, access, and utilize available Cyber Data Lake datasets.
• Develop and maintain consumer training materials, knowledge articles, FAQs, and adoption resources.
• Help users understand available datasets, platform capabilities, and supported use cases.
• Gather stakeholder feedback and identify opportunities to improve the consumer experience.
• Measure onboarding effectiveness, consumer engagement, and platform adoption.

Dataset Discovery & Data Consumption

• Enable consumers to discover, access, and understand available cyber datasets.
• Maintain consumer-facing dataset catalogs, usage guidance, and reference documentation.
• Assist users in identifying appropriate datasets for security, compliance, audit, operational, and analytics use cases.
• Support query development, reporting, dashboarding, KPI creation, and analytics initiatives.
• Facilitate analytics working sessions and consumer testing activities.
• Promote best practices for cyber data consumption and analysis.

Security Analytics, Detection & Investigation Enablement

• Partner with Detection Engineering, Security Operations, and Product Security teams to maximize the value of available telemetry.
• Validate telemetry availability and accessibility for security monitoring and detection use cases.
• Support detection use-case enablement, tuning, validation, and analytics activities.
• Assist investigators and analysts in locating relevant datasets and telemetry sources.
• Identify telemetry gaps impacting consumer use cases and provide consumption insights to onboarding and platform teams to support prioritization and remediation decisions.
• Support security analytics and SIEM use cases without performing operational incident response activities.

Audit, Compliance & Assurance Enablement

• Enable audit, quality, compliance, assurance, and regulatory stakeholders to effectively leverage Cyber Data Lake datasets.
• Support audit evidence requests, compliance reporting activities, and assurance use cases.
• Assist stakeholders in identifying telemetry that supports audit and regulatory requirements.
• Maintain audit and compliance usage guidance and support documentation.
• Identify telemetry gaps that could affect audit readiness or compliance reporting.

Data Quality & Consumer Experience Monitoring

• Monitor operational health of onboarded datasets from a consumer perspective.
• Monitor consumer-impacting data quality, availability, latency, and telemetry usability issues and coordinate remediation with platform engineering teams.
• Coordinate with platform and engineering teams to resolve data quality issues affecting analytics, reporting, detections, investigations, or audits.
• Publish data quality metrics, scorecards, and consumer-impact assessments.
• Escalate significant issues that impact platform usability or consumer outcomes.