Data Security Engineer - Adelphi, MD
About The Position
Leidos is seeking a Data Security Engineer for the C5ISR Center Cyber Security Service Provider (CSSP), which delivers 24x7x365 defensive cyber operations supporting critical Department of War missions. The team provides continuous monitoring, threat detection, incident response, and vulnerability management across cloud and on-premises environments, including AWS, Azure, GCP, Oracle Cloud, and SaaS platforms. The Data Security Engineer builds, optimizes, and sustains cybersecurity data pipelines that support defensive operations. The role ingests, normalizes, enriches, and manages high-volume security telemetry within Elastic; optimizes data performance and quality; automates workflows; and troubleshoots dependencies across Elastic, Kafka, and CI/CD systems. The engineer partners with cyber teams to provide reliable, analytics-ready data for threat detection and response. The position is hybrid, onsite three days per week, in Adelphi, Maryland. An active Top Secret security clearance and U.S. citizenship are required.
Requirements
- Bachelor's degree and at least 4 years of relevant experience; additional experience may substitute for a degree.
- At least 3 years of data engineering, data analysis, cybersecurity data engineering, or related experience.
- Experience with data ingestion, transformation, normalization, or high-volume data-processing pipelines.
- Experience with relevant technologies such as Elastic Stack, Kafka, Python, Bash, and CI/CD tooling.
- Familiarity with Elastic Common Schema (ECS) or similar cybersecurity data models.
- Required DoD 8570/8140-aligned and CSSP Analyst certifications, as applicable to the position.
- Excellent written and verbal communication skills.
- Active Top Secret security clearance.
- U.S. citizenship.
Nice To Haves
- Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
- Experience working with Ruby.
- Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
- Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.
Responsibilities
- Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem, including Elasticsearch, Logstash, Kibana, and Fleet, to enable high-volume, high-availability operations.
- Design, maintain, and optimize scalable cybersecurity ETL pipelines using the Elastic suite of tools.
- Develop transformations and enrichments for diverse security log and telemetry sources.
- Maintain index templates, mappings, schemas, and data models supporting analytics and detection logic.
- Implement data validation, deduplication, and quality controls to ensure data integrity.
- Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
- Monitor pipeline and indexing performance; troubleshoot data-flow issues; and optimize throughput, storage, and query performance.
- Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
- Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
- Maintain technical documentation, SOPs, and engineering artifacts.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
