Cybersecurity Data Engineer

August Schell•Adelphi, MD

1d•$150,000 - $180,000•Hybrid

About The Position

August Schell is seeking a highly skilled Cybersecurity Data Engineer to join its Engineering team in support of a mission-critical cybersecurity environment. The role focuses on managing high-volume cybersecurity data, improving data processing efficiency, and supporting security analytics and threat detection capabilities. The engineer will collaborate with cybersecurity engineering teams to maintain the reliability, performance, and integrity of security data across enterprise environments. The position is based in Adelphi, Maryland, with a hybrid arrangement requiring three days onsite per week at ALC. An active Top Secret (TS) security clearance is required.

Requirements

Active Top Secret (TS) security clearance.
Ability to work onsite three days per week at ALC in Adelphi, Maryland.
Strong experience with the Elastic Stack, including Elasticsearch, Logstash, Kibana, and Fleet.
Expertise designing, developing, and optimizing scalable data ingestion and ETL pipelines.

Nice To Haves

Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
Experience working with Ruby.
Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

Responsibilities

Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem, including Elasticsearch, Logstash, Kibana, and Fleet, for high-volume, high-availability operations.
Design, maintain, and optimize scalable cybersecurity ETL pipelines using Elastic tools.
Develop transformations and enrichments for diverse security log and telemetry sources.
Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
Implement data validation, deduplication, and quality controls to ensure data integrity.
Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
Maintain technical documentation, SOPs, and engineering artifacts.