Sr. Engineer, Information Security (Cloud Security)

Responsibilities

• Data Ingestion (Fluent Bit & AWS Security Data Lake):
  • Architect, implement, and manage scalable and reliable data ingestion pipelines from various sources into the AWS Data Lake using Fluent Bit/App Fabric etc.
  • Design and configure Fluent Bit agents for efficient log collection, parsing, and routing.
  • Troubleshoot and optimize data ingestion pipelines for performance and reliability.
  • Implement data transformation and enrichment processes during ingestion.
  • Ensure data integrity and quality throughout the ingestion process.
• Security Data Lake (AWS):
  • Design and implement robust security controls for our AWS Data Lake environment.
  • Develop and enforce data access policies and encryption standards within the data lake.
  • Monitor data lake activity for security threats and unauthorized access using AWS security services.
  • Conduct security assessments and participate in hardening the data lake infrastructure.
• Cortex XSOAR Operations:
  • Design, develop, and maintain security automation playbooks using Cortex XSOAR, leveraging data from the AWS Data Lake and other sources.
  • Integrate various security tools and platforms with Cortex XSOAR to automate incident response workflows triggered by data lake analytics.
  • Troubleshoot and optimize existing SOAR playbooks to improve efficiency and effectiveness based on data lake insights.
  • Develop and maintain custom integrations and scripts as needed.
• Use Case Development:
  • Collaborate with security analysts and incident responders to identify and develop new security use cases that leverage the rich data within the AWS Data Lake.
  • Translate security requirements into actionable playbooks, dashboards, and alerts, with a focus on data lake-driven insights.
  • Document and maintain security use case documentation, emphasizing data sources and ingestion methods.
  • Research and stay up to date on new attack vectors and develop data lake-centric use cases to detect them.
• Incident Response:
  • Assist in the investigation and remediation of security incidents, utilizing data lake logs and analytics.
  • Provide technical expertise during security incident analysis, focusing on data lake-related events.
  • Collaborate with cross-functional teams, including data engineers, security analysts, and developers, on data ingestion and security initiatives.

Requirements

• Experience: Minimum of 4-6 years of experience in information security.
• Significant hands-on experience designing, implementing, and managing data ingestion pipelines, with a strong emphasis on Fluent Bit.
• Proven experience working with AWS Data Lake architecture and related services (e.g., S3, IAM, Glue, Athena).
• Experience with Cortex XSOAR or other SOAR platforms.
• Strong experience with Splunk or other SIEM tools.
• Deep understanding of data lake security best practices on AWS.
• Proficient in scripting languages (e.g., Python, Shell scripting).
• Experience with infrastructure-as-code (IaC) tools like Terraform or CloudFormation is a plus.

Skills

• Strong understanding of data ingestion methodologies and best practices.
• Excellent analytical and problem-solving skills, particularly in troubleshooting data pipelines.
• Solid understanding of security principles and practices.
• Ability to work independently and as part of a team.
• Strong communication and interpersonal skills.
• Knowledge of common attack frameworks like MITRE ATT&CK.

Education

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).

Pay

The anticipated base salary for this position is $120,000-$150,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.