Cyber Data Analysis Engineer: SIEM & Cloud Pipelines

CACI International; St. Louis (MO); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International is seeking a Cyber Data Analyst Engineer to design, build, and maintain data pipelines for cybersecurity data. You will work with on‑prem and cloud systems to collect log data from multiple government agencies, ensuring secure storage and easy retrieval while maintaining documentation and cross‑functional collaboration.

The role requires TS/SCI clearance, 5+ years of related experience, and expertise with SIEM, AWS, Linux/Windows servers, and data pipelines.

Qualifications

• Active Top Secret/SCI security clearance required.
• Bachelor’s degree in computer science, IT, or a related field.
• Minimum 5 years of relevant experience.
• DOD 8570 IAT Level II and CSSP Infrastructure Support certifications within 120 days.
• 2+ years Enterprise LAN networking experience.
• 3+ years Unix/Linux Server Administration experience.
• 2+ years Windows Server Administration experience.
• 2+ years Hands-on AWS experience.
• Good oral and written communications; strong listening and comprehension.
• Desired: knowledge of Elasticsearch, Sentinel, Kafka, ArcSight, Kubernetes, Cribl, Ansible.

Responsibilities

• Help customers send log data through enterprise networks to a destination.
• Design, build, and maintain log data pipelines with Cribl, ArcSight, Kafka, AWS, Linux and Windows servers.
• Design, build, and maintain log data management environments using Elasticsearch or Sentinel.
• Identify resources to optimize Linux systems or hosted products.
• Troubleshoot data flow issues from SIEM data collection to storage.
• Troubleshoot data display/storage issues in SIEM.
• Perform root cause analysis for complex issues.
• Ensure product uptime and update versions per policy.
• Develop or improve processes using scripts, Ansible, AWS.
• Document tasks, processes, changes and product statuses.
• Provide team training and interact with customers throughout projects.

Skills

Top Secret/SCI clearance

AWS

Unix/Linux Server Administration

Windows Server Administration

Enterprise LAN networking

YAML

Python

Bash

Ruby

Git

Kubernetes

Cribl

ArcSight

Kafka

Elasticsearch

Sentinel

Ansible

Oral and written communications

Team collaboration

Education

Bachelor’s degree in computer science, Information Technology, or a related field

Tools

Kubernetes

Cribl

ArcSight

Kafka

Elasticsearch

Sentinel

Git

Ansible

Job description

CACI International is seeking a Cyber Data Analyst Engineer to design, build, and maintain data pipelines for cybersecurity data. You will work with on‑prem and cloud systems to collect log data from multiple government agencies, ensuring secure storage and easy retrieval while maintaining documentation and cross‑functional collaboration.

The role requires TS/SCI clearance, 5+ years of related experience, and expertise with SIEM, AWS, Linux/Windows servers, and data pipelines.