Security Platform Engineer - Elastic Data Pipelines

ECI; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

ECI is seeking a Security Platform Engineer to join its Security Engineering team in Dallas, TX. The role focuses on building and operating the platform layer behind security services at scale, with emphasis on Elastic stack, data pipelines, and telemetry reliability.

You will own data ingestion patterns, schema quality, and platform observability, while collaborating with Automation Engineering on detection workflows.

Qualifications

• 3+ years supporting or engineering production SIEM, observability, or data platforms.
• Strong telemetry ingestion, parsing, normalization, enrichment, and schema management.
• Experience with Linux in engineering environments and cloud platforms (AWS/Azure/GCP).

Responsibilities

• Build and operate Elastic platform services and data pipelines across security environments.
• Own Logstash ingestion lifecycle including onboarding, parsing, normalization, enrichment, and schema governance.
• Improve platform reliability with tuning, capacity planning, and retention management.
• Define data quality standards for telemetry used in detection and response.
• Collaborate with Automation Engineering on detection-as-code workflows.

Skills

SIEM engineering

Observability

Elastic Stack

Telemetry ingestion

REST APIs

Education

Bachelor's degree in Computer Science or related field

Tools

Elasticsearch

Logstash

Kibana

Terraform

Ansible

Docker

Kubernetes

Job description

ECI is seeking a Security Platform Engineer to join its Security Engineering team in Dallas, TX. The role focuses on building and operating the platform layer behind security services at scale, with emphasis on Elastic stack, data pipelines, and telemetry reliability.

You will own data ingestion patterns, schema quality, and platform observability, while collaborating with Automation Engineering on detection workflows.