Security Data Engineer

TIAA•Frisco, TX

17h•$124,000 - $154,000

About The Position

The Security Data Engineer works within the Security Technology Engineering team, collaborating with business units and stakeholders to support external and insider threat detection, mitigation, investigation, and response. The role contributes to a global team developing technical solutions and AI/ML capabilities for preventive threat detection. The engineer partners with Cyber Engineering, Operations, Architecture, and Global Infrastructure teams to deploy and operate secure cloud application infrastructure aligned with cybersecurity strategy and business needs. The role designs and maintains data pipelines that process vulnerability, configuration, and asset data at scale across cloud services and workloads, virtual machines, on-premises infrastructure, network devices, and middleware. The position applies data science techniques to correlate and prioritize large, noisy vulnerability datasets, distinguishing meaningful risk signals and producing actionable insights. It also involves analyzing high-volume security data to identify systemic exposure trends and emerging risk clusters, maintaining expertise in vulnerability data across asset classes, and evaluating defense-in-depth compensating controls across technology layers when immediate remediation is not feasible. The role requires analytical and critical thinking, resourcefulness, a strong work ethic, and the ability to work with a global virtual team and communicate effectively with other business units. The broader responsibilities include security systems operations and engineering, cloud solution evaluation, vulnerability analysis, incident and malware investigation, countermeasure development, security consulting, and collaboration with cybersecurity risk and security operations teams.

Requirements

At least 5 years of experience in information security or IT technology.
At least 3 years of Python coding experience.
Experience designing and maintaining data pipelines that process vulnerability, configuration, and asset data at scale across cloud services and workloads, virtual machines, on-premises infrastructure, network devices, and middleware.
Experience applying data science techniques to correlate and prioritize large, noisy vulnerability datasets and distinguish genuine risk signals from background noise.
Hands-on AWS cloud experience.
Strong verbal and written communication skills, as stated in the role description.
University degree preferred.

Nice To Haves

At least 7 years of work experience preferred.
Degree in Computer Science or Data Science.
Experience querying and analyzing high-volume security datasets, including data from AI-enabled and modern scanning tools, to identify systemic exposure trends and emerging risk clusters.
Experience with cloud technologies such as AWS, Azure, or GCP.
Security certifications such as CKA, CKS, CISSP, GIAC, AWS, or Azure certifications.
Excellent interpersonal communication skills.
Ability to provide strong customer service.
Expertise in vulnerability data across asset classes, including how exploitability, exposure, and compensating controls differ by asset type.
Experience evaluating and recommending defense-in-depth compensating controls across network, API, ingress, application, OS/kernel, and orchestration/control-plane layers.

Responsibilities

Provide operations and engineering support for critical security systems and services, including servers, endpoint security, computer forensics, vulnerability and penetration assessment and mitigation, and security event management.
Lead cost-benefit evaluations of cloud solutions compared with virtual private networks, dedicated hosting, and in-house solutions.
Review the technical feasibility of adopting external cloud-based IT platform and infrastructure services.
Identify parts of the organization's IT platform and infrastructure with the greatest potential return for cloud deployment.
Facilitate implementation of global strategies and initiatives that enhance information technology plans, operations, and procedures.
Ensure execution of vulnerability analysis and exploitation assessments of applications, operating systems, and networks.
Report intrusion or incident paths and methods identified through testing and evaluation.
Design, develop, and implement countermeasures, systems integration, and tools for cyber and information operations.
Resolve and document complex malware and intrusion issues as they occur.
Serve as an internal information security consultant on standards, complex issues, and organizational best practices.
Test and analyze complex software systems to determine their functionality and intent.
Communicate with cybersecurity risk and security operations teams to improve the enterprise security posture.
Coach, review, and delegate work to lower-level professionals to develop their IT security knowledge and performance.
Design and maintain data pipelines to extract, transform, and load vulnerability, configuration, and asset data across heterogeneous environments.
Apply data science techniques to correlate and prioritize vulnerability data and produce actionable insights.
Query and analyze security datasets to identify systemic exposure trends and emerging risk clusters.
Evaluate and recommend defense-in-depth compensating controls across technology layers when immediate remediation is not feasible.