Cybersecurity Data Platform Architect

Citigroup Inc.; Irving (TX); On-site; USD 156,000 - 234,000; Full time

Job summary

Citigroup Inc. in Irving, TX seeks a Data Platform Engineer to design and operate scalable data pipelines and data lakes powering security analytics.

The role focuses on building robust ingestion, normalization, and storage backbones for enterprise-scale SOC data, with strong emphasis on reliability and performance. The ideal candidate will have deep data platform expertise, cloud-native infrastructure experience, and hands-on work with large-scale security telemetry.

Qualifications

• Bachelor's degree or equivalent in a related field.
• Experience designing and operating large-scale data platforms for security analytics.
• Strong knowledge of data lakes/warehouses and cloud-native infra.
• Experience with SOC/SEC telemetry data is a plus.

Responsibilities

• Design, build and operate scalable data pipelines for security telemetry.
• Develop data normalization and enrichment to create standardized schemas.
• Architect data lake/warehouse backbones for enterprise-scale analytics.
• Operate data lake infra, balancing cost, performance and retention.
• Integrate with SIEM/XDR and downstream analytics platforms.
• Tune throughput, partitioning and query performance for growth.
• Implement monitoring, alerting and self-healing for pipelines.
• Define data schemas, taxonomies and metadata standards.
• Automate onboarding of new telemetry sources.
• Ensure secure handling and compliance of sensitive data.

Education

Bachelor's degree

Tools

Cribl

Kafka

Spark

Flink

Airflow

Job description

Citigroup Inc. in Irving, TX seeks a Data Platform Engineer to design and operate scalable data pipelines and data lakes powering security analytics.

The role focuses on building robust ingestion, normalization, and storage backbones for enterprise-scale SOC data, with strong emphasis on reliability and performance. The ideal candidate will have deep data platform expertise, cloud-native infrastructure experience, and hands-on work with large-scale security telemetry.