Full-Time Manager, Cyber Data Systems Engineering

• Lead and mentor a team of engineers responsible for cybersecurity data pipelines, SIEM integrations, and custom data acquisition tools.
• Oversee development of data parsers, normalization, and enrichment processes aligned to OCSF and other standards.
• Manage onboarding of third-party data sources via API, including custom app and Lambda development.
• Support and optimize Splunk SIEM infrastructure and integrations.
• Design and manage cloud architecture and automation strategies to ensure reliability, scalability, and compliance.
• Collaborate with threat analytics, detection engineering, and investigations teams to improve alert fidelity and reduce false positives.
• Ensure systems meet regulatory and audit requirements (SOX, PCI, GDPR, CCPA).
• Support internal and external compliance efforts (NIST, ISO 27001, SOC 2).
• Engage stakeholders across SOC, ISOs, and business units to understand evolving data needs.
• Provide Tier 3 support and subject matter expertise during high-severity incidents.
• Drive DevOps practices including CI/CD, infrastructure as code, and automated testing.
• Lead sprint planning, delivery tracking, and cross-functional collaboration across time zones.

• BS in Computer Science, Information Security, or related field (or equivalent experience).
• 5+ years in cybersecurity, data engineering, or software development.
• 5+ years in systems/infrastructure security with increasing responsibility.
• 2+ years in technical leadership or management roles.
• Hands-on experience with cloud platforms (AWS, Azure) and DevOps practices.
• Strong experience with SIEM platforms (Splunk, Sentinel, etc.) and log integration across diverse systems.
• Proficiency in Python, Bash, or PowerShell.
• Experience with log parsing tools (rsyslog, syslog-ng) and data normalization.
• Familiarity with MITRE ATT&CK, threat hunting, and detection engineering.
• Strong understanding of compliance frameworks (CIS, NIST, ISO).
• Proven ability to lead teams in 24/7 operational environments.

• Deep expertise with SIEM platforms (Splunk, Sentinel, Datadog, QRadar).
• Experience with data streaming tools (Vector, Cribl, LogStash).
• Familiarity with large-scale security data platforms (AWS Security Lake, Databricks, Snowflake).
• Hands-on experience with CI/CD and configuration management tools (GitHub Actions, Ansible).

What is the last date for applying to the job?

Which countries are accepted for this remote job?