Security Data Engineer: SIEM Onboarding & Cloud Telemetry

Sharp Decisions; Charlotte (NC); Hybrid; USD 110,000 - 165,000; Full time

Job summary

Sharp Decisions is seeking a Cyber Security Engineer - Data Engineer to design, build, and support scalable security data ingestion pipelines for enterprise security monitoring platforms. The role focuses on onboarding security log sources into SIEM and cloud data platforms, ensuring high-quality telemetry for threat detection, incident response, compliance, and analytics.

You will work on log ingestion, data transformation, parsing, and cloud security platforms with automation and collaboration

Qualifications

• 3+ years in cybersecurity, data engineering, or security operations.
• Hands-on with onboarding and validating log sources in SIEM/cloud data platforms.
• Experience parsing and transforming structured and unstructured data (JSON/XML/CSV).
• Knowledge of security telemetry sources across network, endpoint, cloud, and apps.
• Experience with cloud-native logging and analytics services.
• Strong troubleshooting for data ingestion pipelines and data quality.
• Understanding of logging regulations, retention, and integrity.
• Scripting in Python/PowerShell or similar automation tools.
• Ability to collaborate with cross-functional teams globally.

Responsibilities

• Design, build, and maintain scalable data ingestion pipelines for onboarding security log sources into SIEM and cloud data platforms.
• Parse, normalize, transform, and enrich log data using regex, JSON parsing, and schema mapping.
• Collaborate with application owners, infrastructure teams, cloud teams, vendors, and security stakeholders to onboard new log sources.
• Validate log integrity, completeness, timeliness, and quality of telemetry.
• Align onboarded data with enterprise standards, schemas, naming conventions, and data governance.
• Troubleshoot data ingestion, parsing, transformation, and pipeline issues across platforms.
• Create and maintain documentation for onboarding procedures, pipeline configurations, data mappings, and operational support processes.
• Partner with Detection Engineering and SOC teams to ensure logs support threat detection and response.
• Perform telemetry gap analysis to identify missing data sources and onboarding priorities.
• Support logging practices that comply with audit, regulatory, retention, and data integrity requirements.
• Improve ingestion frameworks, automation, and onboarding workflows for scalability and reliability.
• Develop automation and IaC solutions to streamline deployment and maintenance.
• Monitor pipeline performance and optimize ingestion reliability, throughput, and cost.
• Stay current with evolving cybersecurity data engineering practices and cloud security technologies.

Skills

Security data engineering

SIEM onboarding

Data ingestion pipelines

Regex/JSON parsing

Cloud security platforms

Automation / IaC

Stakeholder collaboration

Threat detection & incident response

Data governance & compliance

Python / PowerShell

Tools

Azure Data Explorer

Azure Log Analytics

SIEM platforms

Terraform

Python

Job description

Sharp Decisions is seeking a Cyber Security Engineer - Data Engineer to design, build, and support scalable security data ingestion pipelines for enterprise security monitoring platforms. The role focuses on onboarding security log sources into SIEM and cloud data platforms, ensuring high-quality telemetry for threat detection, incident response, compliance, and analytics.

You will work on log ingestion, data transformation, parsing, and cloud security platforms with automation and collaboration