Cybersecurity Data Engineer – Cloud & SIEM

CACI; San Antonio (TX); On-site; USD 86,000 - 180,000; Full time

Job summary

CACI seeks a senior data engineer to architect and optimize cloud data pipelines supporting security analytics across ACAS, Elastic, and Splunk. You will design and maintain ETL/ELT processes, integrate diverse data sources, and ensure data quality within secure environments.

Collaborate with cybersecurity teams to translate requirements into scalable data solutions, implement IaC, and contribute to dashboards and reporting for real-time insights and automation across platforms.

Qualifications

• 7+ years of experience in cloud computing, data engineering, integration, and ETL pipeline development.
• Experience with ACAS (Tenable/Nessus), data visualization tools (Elasticsearch, Logstash, Kibana, Splunk), and IT asset management tools.
• Strong proficiency in Python, PowerShell, or Bash for data manipulation and automation.
• Experience with APIs, data connectors, and log ingestion frameworks.
• Familiarity with SQL and NoSQL databases.

Responsibilities

• Architect cloud environments within classified CSP regions and deploy/manage CSP services using Terraform, CloudFormation, and Ansible.
• Design, develop, and maintain ETL/ELT pipelines for ingesting and transforming data into ACAS, Elastic, and Splunk deployments within a cloud environment.
• Integrate diverse data sources into centralized analytics environments.
• Manage data workflows, ensuring accuracy, consistency, and compliance with data management policies.
• Implement data quality checks, normalization, and enrichment processes to enhance analytical outcomes.
• Collaborate with cybersecurity teams to translate analytical requirements into scalable data solutions.
• Optimize data ingestion performance and automate recurring data management tasks using scripting or orchestration tools.
• Monitor, troubleshoot, and resolve data pipeline and integration issues across platforms.
• Maintain data schemas, metadata, and documentation for cross-team visibility.
• Ensure compliance with data security and privacy standards in all engineering processes.
• Contribute to the development of dashboards, visualizations, and reporting solutions powered by Elastic and Splunk

Skills

Cloud computing

ETL pipelines

Python

PowerShell

Bash

APIs

SQL

NoSQL databases

Elasticsearch

Splunk

ACAS (Tenable/Nessus)

Automation scripting

Education

Bachelor’s degree in Computer Science, Information Systems, Data Engineering, or a related field

Tools

Terraform

CloudFormation

Ansible

Job description

The Opportunity:

Join a dynamic cybersecurity and data analytics team responsible for building and maintaining mission-critical data pipelines. Lead efforts to integrate vulnerability, event, and log data across ACAS, Elastic, and Splunk platforms. Support large-scale data environments that power real-time insights and automated security analytics. Collaborate with cross-functional teams to optimize data ingestion, storage, and visualization for operational efficiency. Contribute to data governance, standardization, and automation initiatives to strengthen organizational cybersecurity posture.

Responsibilities:

• Architect cloud environments within classified CSP regions and deploy/manage CSP services, resources, and applications using infrastructure-as-code and automation tools such as Terraform, CloudFormation, and Ansible.
• Design, develop, and maintain ETL/ELT pipelines for ingesting and transforming data pipelines into ACAS, Elastic, and Splunk deployments within a cloud environment.
• Integrate diverse data sources (network sensors, security tools, and log aggregators) into centralized analytics environments.
• Manage data workflows, ensuring accuracy, consistency, and compliance with data management policies.
• Implement data quality checks, normalization, and enrichment processes to enhance analytical outcomes.
• Collaborate with cybersecurity teams to translate analytical requirements into scalable data solutions.
• Optimize data ingestion performance and automate recurring data management tasks using scripting or orchestration tools.
• Monitor, troubleshoot, and resolve data pipeline and integration issues across platforms.
• Maintain data schemas, metadata, and documentation for cross-team visibility.
• Ensure compliance with data security and privacy standards in all engineering processes.
• Contribute to the development of dashboards, visualizations, and reporting solutions powered by Elastic and Splunk

Qualifications:

Required:

• Active TS/SCI
• Bachelor’s degree in Computer Science, Information Systems, Data Engineering, or a related field.
• 7+ years of experience in cloud computing, data engineering, integration, and ETL pipeline development.
• Proven experience with ACAS (Tenable/Nessus), data visualization tools (Elasticsearch, Logstash, Kibana, Splunk), and IT asset management tools
  Strong proficiency in Python, PowerShell, or Bash for data manipulation and automation.
• Hands-on experience with APIs, data connectors, and log ingestion frameworks.
• Familiarity with SQL and NoSQL databases.
• Experience working in secure, enterprise, or government network environments.
• Strong understanding of data security, access control, and encryption principles.
• Excellent analytical, troubleshooting, and communication skills.

Desired:

• Experience with cloud data integration (AWS, Azure, or GCP).
• Knowledge of cybersecurity frameworks and vulnerability management processes.
• Experience with data orchestration and visualization tools.
• Relevant certifications (e.g., Splunk Certified Architect, Elastic Certified Engineer, or Tenable ACAS certification).
• Experience with Linux configuration management, system administration, and troubleshooting

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation\'s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$85,800 - $180,200

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.