Design, build, and maintain scalable data ingestion pipelines for security log sources into SIEM and cloud platforms.
This role is hybrid.
Responsibilities
Parse, normalize, transform, and enrich structured and unstructured log data using regex, JSON, XML, and CSV techniques.
Onboard new log sources from network, endpoint, identity, and cloud infrastructure, ensuring end-to-end data flow with application and infrastructure teams.
Validate log integrity, completeness, timeliness, and quality to ensure reliable security telemetry for monitoring and detection.
Align onboarded data to organizational standards, schemas, naming conventions, and data governance expectations.
Required Skills
5+ years of experience in cybersecurity, data engineering, or log management.
Hands-on experience onboarding and managing log sources in SIEM or cloud data platforms.
Strong proficiency in data parsing and validation techniques including regex, JSON, XML, and CSV.
Experience with Azure Data Explorer and Log Analytics.
Familiarity with common security telemetry sources and cloud logging services.
Ability to partner with security stakeholders and technical teams to resolve data flow issues.
Preferred Skills
Experience with schema mapping and data validation frameworks.
Knowledge of data governance best practices in security environments.