Cybersecurity Data Engineer – Cloud & SIEM

Socket.dev; San Antonio (TX); On-site; USD 86,000 - 180,000; Full time

Job summary

CACI is seeking a Cybersecurity Data Engineer – Cloud & SIEM to join our information technology team in a mission-focused environment. You will design and operate data pipelines across ACAS, Elastic, and Splunk, enabling real-time insights and automated security analytics in cloud platforms.

You will build scalable ETL/ELT processes, enforce data governance, and collaborate with cybersecurity teams to translate requirements into robust data solutions while ensuring data security and regulatory

Qualifications

• Active TS/SCI clearance is required.
• Bachelor’s degree in Computer Science, Information Systems, Data Engineering, or related field.
• 7+ years of cloud, data engineering, and ETL experience.
• Proven experience with ACAS, Elastic, and Splunk.
• Strong Python/PowerShell/Bash scripting skills.
• Experience with APIs, data connectors, and log ingestion.
• Knowledge of SQL and NoSQL databases.
• Experience in secure enterprise or government networks.

Responsibilities

• Architect cloud environments in classified CSP regions using IaC.
• Design and maintain ETL/ELT pipelines for ACAS, Elastic, Splunk deployments.
• Ingest diverse data sources into centralized analytics environments.
• Manage data workflows for accuracy and compliance.
• Implement data quality checks and enrichment processes.
• Translate analytical requirements into scalable data solutions.
• Optimize data ingestion performance and automate recurring tasks.
• Monitor, troubleshoot, and resolve data pipeline issues.
• Maintain data schemas, metadata, and documentation.
• Ensure data security and privacy standards compliance.
• Develop dashboards and reporting with Elastic and Splunk.

Skills

TS/SCI clearance

Cloud data engineering

ETL pipeline development

Python/PowerShell/Bash

ACAS (Tenable/Nessus)

Elasticsearch/Logstash/Kibana

Splunk

SQL & NoSQL databases

Education

Bachelor’s degree in Computer Science

Tools

Terraform

CloudFormation

Ansible

ACAS (Tenable/Nessus)

Elastic Stack

Splunk

Kibana

Job description

Job Title: Cybersecurity Data Engineer – Cloud & SIEMJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: TS/SCIEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *

The Opportunity:

Join a dynamic cybersecurity and data analytics team responsible for building and maintaining mission-critical data pipelines. Lead efforts to integrate vulnerability, event, and log data across ACAS, Elastic, and Splunk platforms. Support large-scale data environments that power real-time insights and automated security analytics. Collaborate with cross-functional teams to optimize data ingestion, storage, and visualization for operational efficiency. Contribute to data governance, standardization, and automation initiatives to strengthen organizational cybersecurity posture.

Responsibilities:

• Architect cloud environments within classified CSP regions and deploy/manage CSP services, resources, and applications using infrastructure-as-code and automation tools such as Terraform, CloudFormation, and Ansible.
• Design, develop, and maintain ETL/ELT pipelines for ingesting and transforming data pipelines into ACAS, Elastic, and Splunk deployments within a cloud environment.
• Integrate diverse data sources (network sensors, security tools, and log aggregators) into centralized analytics environments.
• Manage data workflows, ensuring accuracy, consistency, and compliance with data management policies.
• Implement data quality checks, normalization, and enrichment processes to enhance analytical outcomes.
• Collaborate with cybersecurity teams to translate analytical requirements into scalable data solutions.
• Optimize data ingestion performance and automate recurring data management tasks using scripting or orchestration tools.
• Monitor, troubleshoot, and resolve data pipeline and integration issues across platforms.
• Maintain data schemas, metadata, and documentation for cross-team visibility.
• Ensure compliance with data security and privacy standards in all engineering processes.
• Contribute to the development of dashboards, visualizations, and reporting solutions powered by Elastic and Splunk

Qualifications:

• Active TS/SCI
• Bachelor’s degree in Computer Science, Information Systems, Data Engineering, or a related field.
• 7+ years of experience in cloud computing, data engineering, integration, and ETL pipeline development.
• Proven experience with ACAS (Tenable/Nessus), data visualization tools (Elasticsearch, Logstash, Kibana, Splunk), and IT asset management tools
  Strong proficiency in Python, PowerShell, or Bash for data manipulation and automation.
• Hands-on experience with APIs, data connectors, and log ingestion frameworks.
• Familiarity with SQL and NoSQL databases.
• Experience working in secure, enterprise, or government network environments.
• Strong understanding of data security, access control, and encryption principles.
• Excellent analytical, troubleshooting, and communication skills.

Desired:

• Experience with cloud data integration (AWS, Azure, or GCP).
• Knowledge of cybersecurity frameworks and vulnerability management processes.
• Experience with data orchestration and visualization tools.
• Relevant certifications (e.g., Splunk Certified Architect, Elastic Certified Engineer, or Tenable ACAS certification).
• Experience with Linux configuration management, system administration, and troubleshooting

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$85,800 - $180,200

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.