Data Log Engineer

Responsibilities

• Design, deploy, and maintain custom data parsers and ingestion pipelines within the Security Onion architecture to normalize and ingest-route security telemetry across five separate security networks (NIPRNet, SIPRNet, SIPR-REL, NEN, and CENTRIXS-MEX), preventing data corruption or ingestion gaps.
• Engineer and implement indexing policies, lifecycle management rules, and cluster configurations to handle massive volumes of incoming events, maximizing local storage retention and guaranteeing optimal database performance during high-urgency security incident queries.
• Configure and optimize high-throughput forwarding pipelines to securely transmit cyber telemetry to the DoD Big Data Platform (BDP) and other DoD-approved Enterprise services without disrupting local network operations.
• Engineer, test, and refine automated alarm rules and Intrusion Detection System (IDS) signatures to counter emerging threats and active adversary tactics.
• Continuously calibrate the SIEM to ensure it captures advanced threats while filtering out noisy, irrelevant alerts.

Qualifications

• Required Qualifications: Active TS/SCI security clearance; Certification required per DoDD 8140.03, Intermediate Level (ISC2 SSCP or GIAC GSEC) or Advanced Level (ISACA CISM, ISC2 CISSP, or GIAC GSLC); BS or equivalent work experience in Data Engineering, Information Assurance, Cybersecurity, or Systems Administration field; 9+ years of overall IT, cybersecurity, or data engineering experience; Demonstrated experience in cyber-data engineering, including log parser creation, index policy management, data routing, and telemetry forwarding.
• Desired Qualifications: Extensive experience configuring and maintaining Security Onion architectures; Familiarity with engineering data pipelines for the DoD Big Data Platform (BDP) or similar enterprise data lakes; Knowledge of adversary tactics, techniques, and procedures (TTPs) and experience translating them into IDS rules and SIEM alerts; Previous experience operating in a highly complex, metrics-driven DoD cybersecurity environment.

Pay

The target salary range is $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.