Security Data Engineer

Deloitte • Colorado Springs, CO

13d • $95,600 - $159,300

About The Position

Deloitte’s Government & Public Services practice is seeking a Project Security Engineer III for its Cyber–Enterprise Security team. The role supports clients in strengthening and scaling cybersecurity capabilities across complex environments by designing, implementing, and improving enterprise security solutions aligned with business and mission needs. The work centers on security engineering, control implementation, and cross-functional client delivery.

As a Security Data Engineer on the Enterprise Security team, you will engineer and maintain security telemetry pipelines, develop and tune network-focused detections, and assess whether available data provides the visibility needed for monitoring, threat hunting, and incident response. You will work with network engineering teams and other stakeholders to improve data quality, coverage, scalability, reliability, and cost efficiency across hybrid cloud and on-premises environments.

This is a Project Delivery Talent Model role for professionals with specialized skills aligned to a current client need. Team members focus on client service delivery without additional expectations related to business development or promotion; employment is tied to the role on a project. The position is based in Colorado Springs, Colorado. Recruiting for this role ends on 12/01/2026.

Requirements

• Bachelor’s degree in Cybersecurity or Information Technology.
• Active TS/SCI or SCI eligibility.
• At least 4 years of experience in cybersecurity, enterprise security, or information security.
• At least 3 years of experience supporting the implementation or administration of security technologies across enterprise environments.
• At least 3 years of experience producing technical documentation, status reporting, or client deliverables for security engagements.
• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong technical acumen, interpersonal skills, and professional demeanor.
• Ability to meet deadlines and provide clear guidance to others.

Nice To Haves

• Master’s degree in Cybersecurity, Information Technology, Information Systems, Engineering, or a related field, with 10+ years of related experience.
• Experience supporting government or public sector clients.
• Experience with cloud security, data security, and network security.

Responsibilities

• Design, write, and deploy high-fidelity detection rules using SQL, Sigma, YARA-L, or Python for network-based attack techniques such as C2 beaconing, data exfiltration, and lateral movement.
• Continuously tune network detections to reduce false positives while maintaining a high signal-to-noise ratio.
• Identify telemetry needed for network monitoring, threat hunting, incident response, and custom detection engineering.
• Map detection requirements to data sources and identify visibility gaps across hybrid cloud and on-premises environments.
• Design and maintain pipelines that ingest security telemetry from network, endpoint, identity, cloud, application, OT, and security infrastructure sources.
• Ensure telemetry is reliably delivered to SIEM, data lake, analytics, and detection platforms; troubleshoot ingestion, parsing, latency, and data-quality issues.
• Evaluate whether packet, flow, session, DNS, proxy, authentication, endpoint, and application telemetry meets specific detection requirements.
• Support custom detection development through data discovery, enrichment, normalization, and validation.
• Identify opportunities to evolve detections from low-level indicators toward higher-level behavioral and tradecraft-based detection using the Detection Stack.
• Work with network engineering teams to evaluate network sensors, NetFlow/IPFIX, DNS and proxy telemetry, firewall logs, IDS/IPS, packet capture, Zeek/network metadata, and NDR platforms.
• Establish telemetry health metrics, dashboards, and automated checks for missing, delayed, or malformed data.
• Assess network visibility across data centers, cloud environments, remote networks, and segmented environments.
• Optimize telemetry architectures and ingestion pipelines for performance, scalability, reliability, and cost.

Benefits

• Competitive benefits package for project delivery-focused professionals.
• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
• Broad range of employee benefits.
• Opportunities for on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level