Cybersecurity Data Engineer - TOP SECRET REQUIRED

DirectViz Solutions•Adelphi, MD

1d•Hybrid

About The Position

DirectViz Solutions (DVS) is seeking a Cybersecurity Data Engineer to support cybersecurity operations in Adelphi, Maryland. The role focuses on designing, maintaining, and optimizing data pipelines within the Elastic ecosystem to support security analytics, threat detection, and operational monitoring. The ideal candidate has experience with large-scale cybersecurity data environments, data ingestion and processing optimization, and collaboration with cybersecurity teams to ensure reliable and efficient data operations. This is a hybrid position requiring three days onsite per week at ALC in Adelphi, Maryland. An active Top Secret clearance is required.

Requirements

At least 5 years of experience in data engineering, software development, systems engineering, or a related technical field.
At least 3 years of hands-on experience with Elasticsearch, Logstash, and Kibana (ELK Stack), including data ingestion, ETL pipelines, and performance optimization.
Active Top Secret (TS) clearance.
Ability to work onsite three days per week at ALC in Adelphi, Maryland.
Ability to maintain focus and awareness throughout scheduled working hours.
Ability to perform tasks involving prolonged sitting or standing at a desk and use of a computer, mouse, and keyboard.
Ability to lift and move objects weighing up to 15 pounds as needed.
Excellent verbal and written communication skills and a strong command of English.
Ability to work independently and collaborate effectively as part of a team.
Ability to quickly learn and retain routine tasks and processes.
Strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
Ability to perform the essential functions of the role satisfactorily and adapt to additional responsibilities or changes to assigned duties.

Nice To Haves

Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
Experience working with Ruby.
Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

Responsibilities

Configure and optimize data ingestion, storage, and retrieval within Elasticsearch, Logstash, Kibana, and Fleet for high-volume, high-availability operations.
Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
Develop transformations and enrichments for diverse security log and telemetry sources.
Maintain index templates, mappings, schemas, and data models that support analytics and detection logic.
Implement data validation, deduplication, and quality controls to ensure data integrity.
Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
Maintain technical documentation, SOPs, and engineering artifacts.