Security Data Engineer

TIAA•Frisco, TX

1d•$124,000 - $154,000•Onsite

About The Position

The Security Technology Engineering team is responsible for collaborating and partnering with various Business Units (BUs) and stakeholders across the organization to manage external and insider threat detection, mitigation, investigation and response efforts across the organization. The Lead Info Security Engineer will participate in the activities of a global, expert team that develops robust technical solutions and advanced AI/ML capability to enable preventive threat detection efforts. The cloud security Data-AI engineer works with our Cyber Engineering, Operations, Architecture and Global Infrastructure teams to deploy and operate a secure cloud application infrastructure that aligns with the Cyber security strategic initiatives and business needs. They will be responsible for engineer designs and maintaining data pipelines that extract, transform and load vulnerability, configuration and asset data at scale across heterogeneous environments, including cloud services and workloads, virtual machines, on-premises infrastructure, network devices and middleware. The cloud security Data-AI engineer applies data science techniques to correlate and prioritize large, noisy vulnerability datasets, distinguishing genuine risk signals from background noise to produce actionable insights. The ideal candidate will be capable of querying and analyzing high-volume security datasets, including those generated by AI-enabled and modern scanning tools, to identify systemic exposure trends and emerging risk clusters. The cloud security AI engineer is expected to maintain deep domain expertise in vulnerability data across asset classes, including an understanding of how exploitability, exposure and compensating controls differ by asset type. The cloud security AI engineer evaluates and recommends defense-in-depth compensating controls across the technology stack — spanning network, API, ingress, application, OS/kernel and orchestration/control plane layers — to reduce risk where immediate remediation is not feasible. They are expected to be self-starters, have a strong work ethic, leverage analytical and critical thinking and be resourceful in working as part of a global virtual team. The role also requires interfacing with other business units so the candidate must have strong verbal and written communication skills.

Requirements

5+ years of experience in Information Security or IT Technology.
3+yrs experience python coding
Experience in designing and maintaining data pipelines that extract, transform, and load vulnerability, configuration, and asset data at scale across heterogeneous environments, including cloud services and workloads, virtual machines, on-premises infrastructure, network devices, and middleware
Experience applying data science techniques to correlate and prioritize large, noisy vulnerability datasets, distinguishing genuine risk signals from background noise to produce actionable insights
Hands-on AWS cloud experience

Nice To Haves

Degree in Computer Science or Data Science
Experience of querying and analyzing high-volume security datasets — including those generated by AI-enabled and modern scanning tools — to identify systemic exposure trends and emerging risk clusters
Experience with cloud technologies such as AWS, Azure, GCP
Security certifications such as CKA, CKS, CISSP, GIAC, AWS, Azure, etc.
Excellent verbal, written, and interpersonal communication skills
Ability to provide strong customer service.
Experience maintaining deep domain expertise in vulnerability data across asset classes, including how exploitability, exposure, and compensating controls differ by asset type
Experience evaluating and recommending defense-in-depth compensating controls across the technology stack — network, API, ingress, application, OS/kernel, and orchestration/control plane layers — to reduce risk where immediate remediation is not feasible

Responsibilities

Provides operations and engineering support for critical security systems and services including servers, endpoint security, computer forensics, vulnerability/penetration assessment/mitigation, and security event management.
Leads the cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
Reviews technical feasibility of adopting external cloud based IT platform and infrastructure services within the organization.
Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
Facilitates implementation of the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
Ensures the execution of vulnerability analysis and exploitation of applications, operating systems and networks.
Reports identified intrusion or incident paths and methods discovered through testing and evaluation procedures.
Designs, develops and implements countermeasures, systems integration and tools specific to cyber and information operations.
Resolves and documents complex malware and intrusion issues within the system as they occur.
Functions as an internal information security consultant on the standards, complex issues and best practices for the organization.
Conducts testing and analysis of complex software systems to determine both the functionality and intent of the systems.
Communicates with cybersecurity risk and security operation teams to enhance the overall security posture of the enterprise.
Coaches, reviews and delegates work to lower level professionals to enhance their knowledge and performance related to information technology (IT) Security.