Senior Specialist, Cybersecurity Engineering

Merck•REMOTE, REMOTE

3d•$117,000 - $184,200•Hybrid

About The Position

We are seeking a CD&A Engineer – Specialist to design, engineer, and operate security data pipelines and cloud infrastructure supporting enterprise‑scale analytics and detection platforms. This role focuses on ETL engineering using Cribl and infrastructure‑as‑code (IaC) across Google Cloud and Azure, enabling reliable, scalable, and cost‑effective ingestion and processing of security telemetry. The role sits at the intersection of security data engineering, cloud infrastructure engineering, and operational reliability, with a strong emphasis on automation, standardization, and platform enablement for Cyber Defense & Analytics.

Requirements

Bachelor's degree
Minimum 4 years of experience in security data engineering, cloud engineering, or platform engineering roles.
Hands‑on experience with Cribl or equivalent security data pipeline / ETL tooling.
Strong experience building and managing infrastructure using IaC (Terraform, ARM/Bicep, or similar).
Practical experience with Google Cloud and/or Azure.
Solid understanding of security telemetry, logging, and data lifecycle concepts.
Experience operating platforms in large, enterprise‑scale environments.

Nice To Haves

Certificate Services
Cloud Security
Cybersecurity Analytics
Cybersecurity Operations
Delivery of Security Applications
Design Applications
Identity Access Management (IAM)
Incident Response
Information Security
Network Segmentation
Operational Technology (OT) Security
Security Analytics
SLA Management
System Designs
Team Leadership
Technical Advice

Responsibilities

Engineer and operate Cribl pipelines to ingest, parse, enrich, route, and transform high‑volume security telemetry.
Optimize data flows for performance, reliability, and cost efficiency across security analytics platforms, including SIEM, XDR, and data lakes.
Implement and enforce data standards for normalization, metadata enrichment, and data quality validation.
Support onboarding of new security data sources and continuous improvement of existing pipelines.
Design, deploy, and maintain cloud infrastructure using Infrastructure as Code (IaC) across Azure and Google Cloud.
Manage infrastructure for security data platforms, ingestion services, and supporting components using Terraform, ARM/Bicep, or equivalent tooling.
Ensure infrastructure deployments are consistent, repeatable, and auditable across environments (development, test, production).
Partner with cloud and platform teams to align infrastructure with enterprise security, networking, and governance standards.
Ensure availability, scalability, and resilience of security data pipelines and supporting infrastructure.
Implement monitoring, alerting, and operational metrics for ETL and ingestion services.
Participate in incident response and root cause analysis related to data pipeline or infrastructure issues.
Proactively identify and remediate performance bottlenecks and operational risks.
Drive automation for infrastructure provisioning, pipeline deployment, and configuration management.
Contribute to roadmap planning, technical debt reduction, and operational maturity initiatives.
Develop and maintain documentation, standards, and runbooks for data pipelines and infrastructure.
Promote reuse and standard patterns across CD&A engineering.
Work closely with Cyber Defense (CFC/SOC), XDR/SIEM engineers, Cloud Security, Platform Engineering, and Compliance teams.
Support audit, compliance, and data retention requirements impacting security telemetry.
Provide technical input into architecture decisions, onboarding reviews, and platform changes.