Federal Cybersecurity Senior Advisor - Security Data Management (SDM)

Socket.dev; Round Rock (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Dell Technologies in Round Rock, Texas, seeks a Federal Cybersecurity Senior Advisor to advance security data management. You will lead logging, monitoring, and data pipelines, building dashboards and alerts with Splunk, Elastic Stack, Cribl, and NDR tools.

Strong Kubernetes/Docker skills and scripting are required for scalable, compliant security operations. Join a high-impact team delivering AI-enabled security operations, governance, and response automation across production environments with

Qualifications

• Bachelor's degree in Cybersecurity, CS, or related field.
• 10–12 years of cybersecurity engineering focusing on logging, monitoring, data management, and infrastructure.
• Hands-on with Elastic Stack, Cribl, Splunk Enterprise/Cloud.
• Proficiency with Kubernetes, Docker, and CI/CD integration.
• Experience with Dell ECS, PowerScale and virtual environments.
• Scripting in Python, Bash, or PowerShell.
• Strong collaboration and KPI-driven accountability.
• Ability to operate production systems with ownership.

Responsibilities

• Lead the implementation, configuration, and administration of enterprise logging and monitoring platforms.
• Design, build, and maintain security data pipelines for reliable log ingestion and data quality.
• Develop scalable observability and logging infrastructure using Docker, Kubernetes, and Dell storage solutions.
• Create automation and integrations using Python, Bash, and PowerShell.
• Optimize logging platform performance to support threat detection and incident response.
• Ensure compliance with frameworks like NIST, MITRE ATT&CK, and CIS.

Skills

Elastic Stack

Cribl

Splunk

Kubernetes

Docker

Python

Bash

PowerShell

Education

Bachelor's degree in Cybersecurity/CS

Tools

Dell ECS

PowerScale

Vector

Microsoft Sentinel

Palo Alto Strata

Job description

Responsibilities

Federal Cybersecurity Senior Advisor - Security Data Management (SDM)

Organization: Dell Security & Resiliency - Cybersecurity Engineering and Operations

The Dell Security & Resiliency organization manages the security risk across all aspects of Dell's business. We are currently experiencing incredible growth to meet the security needs of the world's largest technology company. With team members located in over 15 countries, you will have an excellent opportunity to influence the security culture at Dell and further develop your career.

Join us as a Federal Cybersecurity Senior Advisor - Security Data Management (SDM) on our Cybersecurity Engineering and Operations team to do the best work of your career and make a profound social impact.

What You'll Achieve

As a Federal Cybersecurity Senior Advisor on the Security Data Management (SDM) team, you will be a key technical contributor in advancing Dell's cybersecurity visibility, threat detection, and observability capabilities. You will implement, operate, and continuously improve logging, monitoring, and data pipeline solutions that empower security teams with actionable insights and reduce response times. You will leverage technologies such as Splunk, Elastic Stack, Cribl, and NDR platforms while contributing to Dell's evolution toward AI-enabled, data-driven security operations.

This role emphasizes hands-on execution, optimization, and operational excellence delivering reliable, high-quality security data capabilities that strengthen the organization's resilience against evolving threats.

Key Responsibilities

• Lead the implementation, configuration, and administration of enterprise logging and monitoring platforms, including Splunk, Elastic Stack, and Cribl, while developing dashboards, alerts, correlation searches, and reporting capabilities.
• Design, build, and maintain security data pipelines, ensuring reliable log ingestion, transformation, normalization, enrichment, and data quality using tools such as Cribl and Vector.
• Develop and support scalable observability and logging infrastructure leveraging Docker, Kubernetes, virtualized environments, Dell ECS, and PowerScale for data retention, monitoring, and analytics.
• Create automation and integrations using Python, Bash, and PowerShell to streamline data collection, configuration management, operational processes, and security monitoring workflows.
• Optimize logging platform performance and support threat detection, incident response, forensic investigations, and AI-enabled security operations through high-quality, analytics-ready data and robust observability practices.
• Ensure compliance with security and regulatory frameworks including NIST, MITRE ATT&CK, and CIS, while supporting audit readiness, risk assessments, privacy requirements, and AI governance controls.
• Drive platform reliability and continuous improvement by developing runbooks, monitoring service health, participating in incident response, identifying operational gaps, and implementing scalable remediation and automation solutions.

Essential Requirements

• USA Citizen
• Education: Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• Experience: 10-12 years of experience in cybersecurity engineering, with a focus on logging, monitoring, data management, and infrastructure.
• Strong hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana), Cribl, and Splunk Enterprise/Cloud.
• Proficiency in Kubernetes, Docker, and CI/CD pipeline integration.
• Experience with Dell ECS, PowerScale, and virtual machine environments.
• Scripting skills in Python, Bash, or PowerShell.
• Strong ability to operate production systems with accountability to KPIs and outcomes.
• Solid communication skills and ability to collaborate across technical and non-technical teams.

Desirable Requirements

• Familiarity with NDR technologies such as NetWitness, Corelight, or ExtraHop.
• Knowledge of additional logging/SIEM technologies: Microsoft Sentinel, Palo Alto Strata.
• Experience with pipeline technologies such as Cribl, Vector.
• Exposure to security data and analytics engineering: log/telemetry pipelines, schema governance, normalization/enrichment, and query-driven analytics.
• Familiarity with AI/ML-assisted security operations concepts, agentic AI safety practices, or secure-by-design principles for automated workflows.
• Experience with cloud-native logging/analytics platforms, time-series/log query languages, and data ingestion/transformation patterns.
• Industry certifications such as: CISSP, GCIA, GCIH, GMON, Splunk Certified Power User/Admin, CCNA, CCNP, PCNSA, PCNSE.