Description

Key Responsibilities

·        Define the target-state data model for migration across 52 source types, including 7 native AWS sources and 45 custom sources.

·        Own source-to-CWUDS data mapping decisions and ensure accurate transformation and normalization.

·        Own OCSF v1.5 schema design and normalization standards and ensure all CWUDS data remains OCSF-normalized.

·        Ensure data compatibility with the Project Cherrug AI security solution and downstream security consumers.

·        Design the OCSF transformation framework for custom and third-party security sources, including Azure Activity Logs.

·        Define required columns, data types, partitioning strategies, schema mappings, and field-parity rules.

·        Perform metadata-aware data assessment, including AWS Glue table inventory, S3 volume/date-range profiling, Athena record-count reconciliation, and source-level readiness scoring.

·        Identify schema and data-quality blockers and provide remediation guidance.

·        Define retention, encryption, and centralized security data standards for cross-region data flows, including EU-Central-1 to US-EAST-1.

·        Design and lead parallel-run validation between Amazon Security Lake and CWUDS.

·        Define validation criteria for log completeness, field-level parity, record counts, data accuracy, schema compliance, and latency.

·        Establish migration acceptance criteria and validation checklists.

·        Advise on PII/GDPR data-handling controls, including data minimization, normalization, and data-residency requirements.

·        Partner with security, cloud, data engineering, and application teams to ensure successful migration and downstream data usability.

·        Troubleshoot data discrepancies and provide remediation guidance for schema, transformation, and data-quality issues.

Required Skills

·        Strong hands-on experience with OCSF (Open Cybersecurity Schema Framework), preferably OCSF v1.5.

·        Deep experience with Amazon Security Lake.

·        Strong AWS data platform experience with AWS Glue, Amazon Athena, AWS Lake Formation, and Amazon S3.

·        Strong knowledge of Parquet, partitioning, schema design, and data modeling.

·        Strong SQL skills for data profiling, reconciliation, and validation.

·        Experience designing and validating security telemetry/log data pipelines.

·        Strong understanding of AWS security data sources, including AWS CloudTrail, VPC Flow Logs, Amazon GuardDuty, and third-party security sources.

·        Experience with data-quality validation, reconciliation, and completeness checks.

·        Experience designing data architectures for large-scale security/event telemetry.

·        Strong understanding of data normalization and schema mapping across heterogeneous sources.

Preferred / Nice-to-Have Skills

·        Experience normalizing multi-vendor security telemetry into OCSF.

·        Experience with third-party security log sources and custom OCSF mappings.

·        Familiarity with GDPR, PII handling, and data-residency requirements for EU-sourced data.

·        Experience with cross-region AWS data architecture.

·        Experience supporting security analytics, SIEM, threat detection, or AI-based security platforms.

·        Knowledge of data governance, retention, encryption, and centralized security data standards

Key Skills

Education

Bachelor's degree