Senior Technical Lead – Data Engineer (Cybersecurity)

SIMARN Solutions; Bellevue (WA); On-site; USD 140,000 - 200,000; Full time

Job summary

Simarn Solutions seeks a Senior Data Engineer to lead scalable data ingestion and transformation pipelines for cybersecurity telemetry. You will manage data flows from 100+ sources, ensuring secure, reliable data movement across analytics platforms and security operations.

Responsibilities include designing pipelines with Cribl/Vector, integrating Syslog, Kafka, HTTP sources, applying OC SF, and delivering end-to-end data lineage with downstream tools like Splunk and Snowflake.

Qualifications

• 10+ years of experience in cybersecurity.
• 5+ years with Cribl, Vector, Datadog, Splunk or similar data pipeline platforms.
• Strong experience in data ingestion, transformation, parsing, enrichment, and routing.
• Experience handling large-scale security telemetry and multiple log sources.
• Understanding of secure data processing, schema normalization, and data governance.

Responsibilities

• Design and implement scalable, modular ingestion pipelines using Cribl, Vector, and other data pipeline platforms.
• Integrate and process security telemetry from Syslog, Kafka, HTTP, Event Hubs, and Blob Storage.
• Develop reusable ingestion frameworks and templates for consistent data processing.
• Implement data parsing, filtering, enrichment, dynamic routing, and format conversions.
• Apply the Open Cybersecurity Schema Framework (OCSF) for security event normalization and schema validation.
• Ensure secure data transfer, data quality, traceability, and end-to-end data lineage.
• Monitor pipeline performance, troubleshoot failures, and minimize data loss and duplication.
• Integrate data with downstream platforms such as Splunk, Snowflake, Azure Data Explorer (ADX), and Log Analytics.
• Collaborate with cybersecurity, analytics, and platform teams to support threat detection, compliance, and security analytics.

Skills

Security telemetry

Data pipelines

Data ingestion

Data transformation

Data parsing

Data enrichment

Data routing

Security governance

Data lineage

Tools

Cribl

Vector

Datadog

Splunk

Kafka

Syslog

HTTP

Event Hubs

Blob Storage

Snowflake

ADX

Log Analytics

Job description

Job Location- Bellevue, Washington / Overland Park, Kansas

Employment Type- Contract

Experience: 10+ years in Cybersecurity

Job Summary

We are seeking experienced Senior Data Engineers to lead the design, development, and implementation of scalable data ingestion and transformation pipelines for cybersecurity telemetry. The role involves managing data flows from 100+ existing and new data sources, ensuring secure, reliable, and efficient data movement across security analytics platforms.

Key Responsibilities

• Design and implement scalable, modular, and reusable data ingestion pipelines using Cribl, Vector, and other data pipeline platforms.
• Integrate and process security telemetry from multiple sources, including Syslog, Kafka, HTTP, Event Hubs, and Blob Storage.
• Develop reusable ingestion frameworks and templates for consistent data processing.
• Implement data parsing, filtering, enrichment, dynamic routing, and format conversions.
• Apply the Open Cybersecurity Schema Framework (OCSF) for security event normalization and schema validation.
• Ensure secure data transfer, data quality, traceability, and end-to-end data lineage.
• Monitor pipeline performance, troubleshoot failures, and minimize data loss and duplication.
• Integrate data with downstream platforms such as Splunk, Snowflake, Azure Data Explorer (ADX), and Log Analytics.
• Collaborate with cybersecurity, analytics, and platform teams to support threat detection, compliance, and security analytics.

Required Qualifications

• 10+ years of experience working in cybersecurity.
• 5+ years of experience with Cribl, Vector, Datadog, Splunk, or similar data pipeline platforms.
• Strong experience in data ingestion, transformation, parsing, enrichment, and routing.
• Experience handling large-scale security telemetry and multiple log sources.
• Understanding of secure data processing, schema normalization, and data governance.

Preferred Qualifications

• Experience with OCSF and security event normalization.
• Knowledge of Kafka, Syslog, HTTP, and cloud-based data ingestion.
• Experience with Snowflake, Splunk, ADX, or Log Analytics.
• Strong troubleshooting, architecture, and technical leadership skills.