Cybersecurity Data Engineer

Special-Aerospace-Security-Services-Inc; Fort Meade (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Special-Aerospace-Security-Services-Inc is seeking a Cybersecurity Data Engineer to design and optimize data pipelines within the Elastic stack for high-volume security operations. You will develop transformations for various log sources, maintain indices and data models, and ensure data quality across ingestion and processing stages.

Collaborating with Detection Engineering, Threat Analysis, and Endpoint teams, you will support operational requirements and contribute to documentation and

Qualifications

• Experience configuring and optimizing data ingestion, storage, and retrieval within the Elastic stack.
• Design and maintain scalable cybersecurity ETL pipelines using Elastic tools.
• Develop transformations and enrichments for diverse security log sources.
• Maintain index templates, mappings, schemas, and data models for analytics/detection.

Responsibilities

• Implement data validation, deduplication, and quality controls to ensure data integrity.
• Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
• Monitor pipeline and indexing performance; troubleshoot data-flow issues and optimize throughput.
• Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
• Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
• Maintain technical documentation, SOPs, and engineering artifacts.

Skills

Data engineering

ETL pipelines

Python scripting

Analytical thinking

Tools

Elasticsearch

Logstash

Kibana

Fleet

Kafka

Job description

200 - Cyber Security Services Cybersecurity Serv Fort Meade, MD, US

4 days ago Requisition ID: 1121

Cybersecurity data engineer

• Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem (Elasticsearch, Logstash, Kibana, Fleet) to enable high-volume, high-availability operations.
• Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
• Develop transformations and enrichments for diverse security log and telemetry sources.
• Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
• Implement data validation, deduplication, and quality controls to ensure data integrity.
• Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
• Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
• Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
• Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
• Maintain technical documentation, SOPs, and engineering artifacts

3 days on site at ALC, Adelphi MD

• TS clearance
• Nice to have:
  • Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
  • Experience working with Ruby.
  • Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
  • Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.