Description

Architect scalable, reusable security telemetry pipelines and define enterprise governance models for data ingestion, transformation, and storage.

This role is remote.

Responsibilities

• Develop platform-agnostic ingestion frameworks supporting Syslog, HTTP, Event Hubs, Snowflake, and ADX.
• Define multi-year ingestion roadmaps, establishing platform standards and architectural guardrails.
• Implement advanced data transformation logic using Groovy, Python, or JavaScript while enforcing security controls.
• Design and implement data lineage, traceability, and OCSF-based normalization across all layers.
• Drive platform consolidation and integrate pipeline-level observability for health monitoring and alerting.

Required Skills

• 10+ years of experience in Cybersecurity.
• 5+ years of experience with Cribl.
• 5+ years of experience with scripting languages including JavaScript, Python, or Groovy.
• Deep knowledge of Syslog, HTTP, Event Hubs, Snowflake, and Azure Data Explorer (ADX).
• Experience creating reference architectures and standardized pipeline blueprints.
• Ability to set enterprise governance models for schema evolution and data source onboarding.

Preferred Skills

• Experience with OCSF-based normalization and field mapping.
• Background in driving platform consolidation and rationalizing redundant patterns.

Key Skills

Education

Any Gradute