Cyber Data Engineer: Python + Elastic Pipelines (TS)

SASSI; Leesburg (VA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

SASSI is seeking a cybersecurity-focused Data Engineer in Leesburg, VA to build and optimize an Elastic-based data pipeline environment. This hybrid role emphasizes Python application development and end-to-end ownership, with active TS clearance requirements tied to the work.

You will configure ingestion, storage, and retrieval across Elasticsearch, Logstash, Kibana, and Fleet, design scalable cybersecurity data pipelines, develop transformations for security logs, and automate workflows using

Qualifications

• U.S. Citizen with Active TS Clearance required.
• 5 years Python application development.
• 5 years Streamlit application development.
• 5 years Docker containerization.
• 5 years deploying and troubleshooting containerized applications.
• 5 years integrating data into applications using SQL, APIs, and files.
• 5 years owning applications end-to-end.
• Willingness to travel 25%.

Responsibilities

• Configure and optimize data ingestion, storage, and retrieval within Elasticsearch stack.
• Design scalable cybersecurity data pipelines using Elastic tools.
• Develop transformations and enrichments for security logs and telemetry sources.
• Maintain index templates, mappings, schemas, and data models for analytics and detection logic.
• Implement data validation, deduplication, and quality controls to ensure data integrity.
• Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tooling.
• Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
• Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
• Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
• Maintain technical documentation, SOPs, and engineering artifacts.
• 3 days on site at ALC, Adelphi MD.

Skills

Python development

Streamlit development

Docker containerization

Containerized applications

SQL

APIs

End-to-end ownership

Travel readiness

Tools

Elasticsearch

Logstash

Kibana

Fleet

Kafka

CI/CD

Job description

SASSI is seeking a cybersecurity-focused Data Engineer in Leesburg, VA to build and optimize an Elastic-based data pipeline environment. This hybrid role emphasizes Python application development and end-to-end ownership, with active TS clearance requirements tied to the work.

You will configure ingestion, storage, and retrieval across Elasticsearch, Logstash, Kibana, and Fleet, design scalable cybersecurity data pipelines, develop transformations for security logs, and automate workflows using