Description

Job Summary

We are looking for a Security Data Architect with strong expertise in Amazon Security Lake, OCSF, AWS data services, security telemetry, and data architecture to lead the migration from Amazon Security Lake to Amazon CloudWatch (CWUDS). The ideal candidate will own data architecture, OCSF fidelity, normalization, schema design, data quality, and validation strategy for the migration.

Key Responsibilities

·        Define the target-state data model for migration across 52 source types, including 7 native AWS sources and 45 custom sources.

·        Own source-to-CWUDS data mapping decisions and ensure accurate transformation and normalization.

·        Own OCSF v1.5 schema design and normalization standards and ensure all CWUDS data remains OCSF-normalized.

·        Ensure data compatibility with the Project Cherrug AI security solution and downstream security consumers.

·        Design the OCSF transformation framework for custom and third-party security sources, including Azure Activity Logs.

·        Define required columns, data types, partitioning strategies, schema mappings, and field-parity rules.

·        Perform metadata-aware data assessment, including AWS Glue table inventory, S3 volume/date-range profiling, Athena record-count reconciliation, and source-level readiness scoring.

·        Identify schema and data-quality blockers and provide remediation guidance.

·        Define retention, encryption, and centralized security data standards for cross-region data flows, including EU-Central-1 to US-EAST-1.

·        Design and lead parallel-run validation between Amazon Security Lake and CWUDS.

·        Define validation criteria for log completeness, field-level parity, record counts, data accuracy, schema compliance, and latency.

·        Establish migration acceptance criteria and validation checklists.

·        Advise on PII/GDPR data-handling controls, including data minimization, normalization, and data-residency requirements.

·        Partner with security, cloud, data engineering, and application teams to ensure successful migration and downstream data usability.

·        Troubleshoot data discrepancies and provide remediation guidance for schema, transformation, and data-quality issues.

Required Skills

·        Strong hands-on experience with OCSF (Open Cybersecurity Schema Framework), preferably OCSF v1.5.

·        Deep experience with Amazon Security Lake.

·        Strong AWS data platform experience with AWS Glue, Amazon Athena, AWS Lake Formation, and Amazon S3.

·        Strong knowledge of Parquet, partitioning, schema design, and data modeling.

·        Strong SQL skills for data profiling, reconciliation, and validation.

·        Experience designing and validating security telemetry/log data pipelines.

·        Strong understanding of AWS security data sources, including AWS CloudTrail, VPC Flow Logs, Amazon GuardDuty, and third-party security sources.

·        Experience with data-quality validation, reconciliation, and completeness checks.

·        Experience designing data architectures for large-scale security/event telemetry.

·        Strong understanding of data normalization and schema mapping across heterogeneous sources.

Preferred / Nice-to-Have Skills

·        Experience normalizing multi-vendor security telemetry into OCSF.

·        Experience with third-party security log sources and custom OCSF mappings.

·        Familiarity with GDPR, PII handling, and data-residency requirements for EU-sourced data.

·        Experience with cross-region AWS data architecture.

·        Experience supporting security analytics, SIEM, threat detection, or AI-based security platforms.

·        Knowledge of data governance, retention, encryption, and centralized security data standards

Key Skills

Education

Any Graduate