VAE is seeking a Cybersecurity Data Engineer to design, build, and optimize the data pipelines that power cyber defense operations on our C5ISR contract. Working within the Elastic ecosystem, you will ensure high volumes of security log and telemetry data are ingested, enriched, and available for detection, threat analysis, and incident response. You will work closely with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to turn raw data into mission-ready insight. The position is a Hybrid position with 3 days per week on-site at the Adelphi Laboratory Center. (ALC), Adelphi, MD
Key Responsibilities
- Configure and optimize data ingestion, storage, and retrieval across the Elastic Stack (Elasticsearch, Logstash, Kibana, Fleet) to support high-volume, high-availability operations.
- Design, maintain, and optimize scalable cybersecurity ETL pipelines using Elastic tools.
- Develop transformations and enrichments for diverse security log and telemetry sources.
- Maintain index templates, mappings, schemas, and data models that support analytics and detection logic.
- Implement data validation, deduplication, and quality controls to ensure data integrity.
- Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tools.
- Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
- Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
- Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to meet operational requirements.
- Maintain technical documentation, SOPs, and engineering artifacts.