Description

You will design and implement scalable data flow pipelines for security telemetry.

This role is hybrid.

Responsibilities

• Architect and implement modular, reusable data pipelines using Cribl, Apache NiFi, and Vector.
• Develop ingestion frameworks supporting diverse inputs (syslog, Kafka, HTTP) and outputs (Snowflake, Splunk, ADX).
• Spearhead schema normalization using OCSF, managing field mapping and validation logic.
• Implement custom data transformations and enrichment using Groovy, Python, or JavaScript.
• Ensure end-to-end data traceability, lineage, and metadata tagging across the lifecycle.

Required Skills

• 10+ years of experience in Cybersecurity.
• 5+ years with data pipeline platforms like Cribl, Vector, or Splunk.
• 5+ years with scripting languages such as Python or JavaScript.
• Experience with data sources including Syslog, Kafka, and Event Hubs.
• Familiarity with data sinks like Snowflake, Splunk, ADX, and Log Analytics.
• Proficiency in data transformation logic (filtering, enrichment, routing).
• Knowledge of JSON and HTTP protocols.

Key Skills

Education

Any Graduate