Cybersecurity Data Engineer — Cloud & SIEM Architect

Socket.dev; San Antonio (TX); On-site; USD 86,000 - 180,000; Full time

Job summary

CACI is seeking a Cybersecurity Data Engineer – Cloud & SIEM to join our information technology team in a mission-focused environment. You will design and operate data pipelines across ACAS, Elastic, and Splunk, enabling real-time insights and automated security analytics in cloud platforms.

You will build scalable ETL/ELT processes, enforce data governance, and collaborate with cybersecurity teams to translate requirements into robust data solutions while ensuring data security and regulatory

Qualifications

• Active TS/SCI clearance is required.
• Bachelor’s degree in Computer Science, Information Systems, Data Engineering, or related field.
• 7+ years of cloud, data engineering, and ETL experience.
• Proven experience with ACAS, Elastic, and Splunk.
• Strong Python/PowerShell/Bash scripting skills.
• Experience with APIs, data connectors, and log ingestion.
• Knowledge of SQL and NoSQL databases.
• Experience in secure enterprise or government networks.

Responsibilities

• Architect cloud environments in classified CSP regions using IaC.
• Design and maintain ETL/ELT pipelines for ACAS, Elastic, Splunk deployments.
• Ingest diverse data sources into centralized analytics environments.
• Manage data workflows for accuracy and compliance.
• Implement data quality checks and enrichment processes.
• Translate analytical requirements into scalable data solutions.
• Optimize data ingestion performance and automate recurring tasks.
• Monitor, troubleshoot, and resolve data pipeline issues.
• Maintain data schemas, metadata, and documentation.
• Ensure data security and privacy standards compliance.
• Develop dashboards and reporting with Elastic and Splunk.

Skills

TS/SCI clearance

Cloud data engineering

ETL pipeline development

Python/PowerShell/Bash

ACAS (Tenable/Nessus)

Elasticsearch/Logstash/Kibana

Splunk

SQL & NoSQL databases

Education

Bachelor’s degree in Computer Science

Tools

Terraform

CloudFormation

Ansible

ACAS (Tenable/Nessus)

Elastic Stack

Splunk

Kibana

Job description

CACI is seeking a Cybersecurity Data Engineer – Cloud & SIEM to join our information technology team in a mission-focused environment. You will design and operate data pipelines across ACAS, Elastic, and Splunk, enabling real-time insights and automated security analytics in cloud platforms.

You will build scalable ETL/ELT processes, enforce data governance, and collaborate with cybersecurity teams to translate requirements into robust data solutions while ensuring data security and regulatory