Senior Security Data Engineer

About the Role

We are representing a confidential technology organization seeking a Senior Security Data Engineer to join their global cyber defense team. This is a hands-on infrastructure role owning multi-terabyte-per-day security telemetry pipelines that power detection, threat hunting, and incident response across cloud environments.

You will spend most of your time writing code, tuning queries, and managing pipeline reliability rather than triaging alerts. The role reports to senior leadership in the United States and includes participation in an on-call rotation for pipeline health. The team is distributed across the US and UK, and you will collaborate regularly with IT, legal, privacy, incident response, insider risk, threat intelligence, and detection engineering.

Responsibilities

• Own multi-terabyte-per-day log pipelines across AWS and GCP, including ingest, routing, enrichment, schema management, and onboarding new telemetry sources
• Control ingest cost and volume by filtering noise at the edge while preserving audit logs for investigations
• Model security data and tune query performance in Snowflake, BigQuery, and Redshift, including tables used by detection engineering
• Ship production services and integrations: custom SIEM connectors, API clients, and automation that other teams depend on
• Set and defend SLOs for log availability and freshness; build dashboards and alerting to monitor them
• Own infrastructure as code and CI/CD for all pipeline components, including the deployment path for detections-as-code
• Build AI agents and automated runbooks that accelerate triage and remediation across cloud infrastructure
• Enforce IAM and service account governance for the pipeline's cloud workloads
• Lead cross-functional projects spanning infrastructure, platform engineering, and incident response
• Create and maintain standards and documentation; mentor engineers across the cyber defense organization

What We're Looking For

• 5+ years building and operating high-volume data pipelines in production at multi-terabyte-per-day scale, using tools like Kafka, Cribl, Dataflow, Kinesis, or CloudWatch
• 4+ years writing production software in Python, Go, Rust, or Java—services and tooling that other engineers run, beyond one-off scripts
• Deep hands-on experience with AWS and GCP, including infrastructure as code and ownership of CI/CD pipelines on GitHub, GitLab, or Bitbucket
• Strong SQL and data modeling in a columnar warehouse such as Snowflake, BigQuery, or Redshift, covering partitioning, cost control, and query tuning
• A track record owning reliability for a platform other engineers depend on, including on-call experience
• Experience building executive dashboards and engineering metrics that drive action
• Proven leadership and technical project management across infrastructure, platform engineering, and incident response
• Exceptional written and verbal communication, a collaborative instinct, and a habit of continuous learning
• Familiarity with an enterprise SIEM as an operator or consumer (Google SecOps/Chronicle, Splunk, Elastic, CrowdStrike LogScale) is a plus
• Experience with Kubernetes, Docker, runtime security controls, detections-as-code (YARA-L, Sigma, SPL), LLM-assisted workflows, penetration testing, red teaming, or triaging bug bounty reports is a bonus

How We Work with You

Candidates apply directly on getajob.ai. A recruiter from our talent team will screen your background and submit you to our client if there is a strong match. We ask that you do not contact the client directly during the process—all communication flows through Get A Job.ai to ensure a coordinated and professional experience.

Pay

This role is based in the United States. The client has not disclosed compensation to Get A Job.ai, so pay details will be shared during the interview process.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates of all backgrounds, experiences, and perspectives, and we encourage applications from individuals who identify as women, non-binary, LGBTQIA+, Black, Indigenous, People of Color, differently-abled, veterans, caretakers, and parents.