Data Security Engineer - Adelphi, MD

Military Spouse Corporate Career Network•Adelphi, MD

1d•Hybrid

About The Position

Leidos is seeking a Data Security Engineer in Adelphi, Maryland, to build, optimize, and sustain cybersecurity data pipelines supporting the C5ISR Center Cyber Security Service Provider (CSSP). The CSSP delivers 24x7x365 defensive cyber operations for critical Department of War missions, with continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms. The engineer will ingest, normalize, enrich, and manage high-volume security telemetry within Elastic; improve data performance and quality; automate workflows; and troubleshoot dependencies involving Elastic, Kafka, and CI/CD systems. The role partners with cyber teams to ensure analysts and defenders have reliable, analytics-ready data for threat detection and response. The position is hybrid, with on-site work three days per week. An active Top Secret security clearance and U.S. citizenship are required.

Requirements

Bachelor's degree and 4 or more years of relevant experience; additional experience may substitute for the degree.
At least 3 years of experience in data engineering, data analysis, cybersecurity data engineering, or a related area.
Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.
Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.
Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.
Required DoD 8570/8140-aligned and CSSP Analyst certifications, as applicable to the position.
Excellent written and verbal communication skills.
Active Top Secret security clearance.
U.S. citizenship.

Nice To Haves

Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
Experience working with Ruby.
Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

Responsibilities

Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem, including Elasticsearch, Logstash, Kibana, and Fleet.
Design, maintain, and optimize scalable cybersecurity ETL pipelines using Elastic tools.
Develop transformations and enrichments for diverse security log and telemetry sources.
Maintain index templates, mappings, schemas, and data models that support analytics and detection logic.
Implement data validation, deduplication, and quality controls to ensure data integrity.
Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
Monitor pipeline and indexing performance; troubleshoot data-flow issues; and optimize throughput, storage, and query performance.
Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
Maintain technical documentation, SOPs, and engineering artifacts.