CSOC Security Data & Logs Lead

Bloomberg; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Bloomberg’s CSOC Program Assurance team is seeking a data-focused security professional to own end-to-end log onboarding, validation, and data quality across monitoring platforms. You will partner with system and data owners to enable telemetry, ensure logs flow reliably, and troubleshoot ingestion issues in a complex, multi‑vendor environment.

You’ll also help scale CSOC capabilities by documenting processes, coordinating audits, and delivering metrics on log coverage and control effectiveness

Qualifications

• Approximately 4–6 years of relevant experience in security operations, infrastructure, or technology roles with a strong technical focus.
• Hands-on experience with log management, security telemetry, or data ingestion pipelines in a production environment.
• Practical experience with SIEM or security analytics platforms, such as Splunk and/or CrowdStrike LogScale.
• Strong understanding of security telemetry sources, including operating systems, applications, network devices, identity systems, and security tools.
• Proficiency with cloud technologies and cloud-native logging, including ingesting or consuming logs from major cloud providers.
• Working knowledge of log formats, schemas, parsing, normalization, enrichment, and time synchronization.
• Experience leveraging version control and automated deployment pipelines to support scalable and repeatable log ingestion and data management workflows.
• Proven ability to troubleshoot complex data flow and ingestion issues across multiple teams and vendors.
• Experience coordinating work across system owners, engineers, and external partners.
• Solid understanding of Security Operations Center workflows, detection dependencies, and monitoring use cases.
• Excellent written and verbal communication skills, including the ability to translate technical concepts for non-technical audiences.
• Strong organizational skills, attention to detail, and ability to manage multiple concurrent priorities in a time-sensitive environment.

Responsibilities

• Own and drive the end-to-end onboarding of security logs required by CSOC monitoring, detection, and investigation platforms.
• Partner directly with system and data owners across the firm to identify required telemetry, enable log delivery, and resolve technical blockers.
• Act as the technical point of coordination for log ingestion, including format alignment, parsing, normalization, enrichment, and data quality validation.
• Ensure the ongoing health and continuity of log flows, proactively identifying and troubleshooting breaks, delays, and degradation.
• Perform root cause analysis on logging gaps or ingestion failures and coordinate remediation with internal engineering teams and external vendors.
• Maintain accurate documentation, inventories, and standards related to log coverage, ingestion methods, and operational dependencies.
• Evaluate new systems, services, and vendor solutions to determine logging feasibility and monitoring coverage, identifying risks and gaps early.
• Drive incremental improvements in automation, validation, and monitoring of log ingestion pipelines to improve reliability and reduce manual effort.
• Support the rollout of new CSOC use cases, detections, and tools by ensuring required data sources are available and reliable.

Skills

Security operations

Log management

SIEM / security analytics

Cloud logging

Data ingestion pipelines

Cross-team collaboration

Troubleshooting

Education

Bachelor's degree

Tools

Splunk

CrowdStrike LogScale

Job description

Bloomberg’s CSOC Program Assurance team is seeking a data-focused security professional to own end-to-end log onboarding, validation, and data quality across monitoring platforms. You will partner with system and data owners to enable telemetry, ensure logs flow reliably, and troubleshoot ingestion issues in a complex, multi‑vendor environment.

You’ll also help scale CSOC capabilities by documenting processes, coordinating audits, and delivering metrics on log coverage and control effectiveness