EngineerJobs.io
← Back to all jobs
SASSI

Data Engineer (Python Application Development – NOT ETL-Focused)

SASSI
Leesburg, VA $120k - $150k/yr Full time Posted 6m ago
Python Data Engineer Data Engineering Security Data Integration Data Pipeline Data Pipelines Data Platform Data Processing Elasticsearch Kafka Kibana Logstash Security SQL
Apply Now

Job Description

SASSI is hiring a cybersecurity data engineer for a hybrid role based in Leesburg, VA. This position emphasizes strong Python application development and containerization, with hands-on ownership across ingestion, storage, retrieval, and Elasticsearch-based pipelines. You will work with security-focused teams and maintain end-to-end workflows that support high-volume, high-availability analytics and detection needs. Active TS clearance is required.

Responsibilities

  • Configure and optimize data ingestion, storage, and retrieval within the Elastic ecosystem, including Elasticsearch, Logstash, Kibana, and Fleet, to support high-volume and high-availability operations.
  • Design, maintain, and optimize scalable cybersecurity data pipelines using Elastic tools.
  • Build transformations and enrichments for diverse security log and telemetry sources.
  • Maintain index templates, mappings, schemas, and data models that enable analytics and detection logic.
  • Implement data validation, deduplication, and quality controls to ensure data integrity.
  • Automate ingestion, transformation, and engineering workflows using Python, Bash, and related tooling.
  • Monitor pipeline and indexing performance, troubleshoot data-flow issues, and optimize throughput, storage, and query performance.
  • Maintain traceability and troubleshoot dependencies across Kafka, Elastic, and CI/CD tooling.
  • Partner with Detection Engineering, Threat Analysis, Endpoint, and other cyber teams to support operational requirements.
  • Maintain technical documentation, SOPs, and engineering artifacts.
  • Work 3 days on site at ALC, Adelphi MD.

Requirements

  • U.S. Citizen with active TS clearance required.
  • 5 years strong Python application development (required).
  • 5 years hands-on Streamlit application development (required).
  • 5 years hands-on Docker containerization (required).
  • 5 years deploying and troubleshooting containerized applications (required).
  • 5 years integrating data into applications using SQL, APIs, and files (required).
  • 5 years owning applications end-to-end (required).
  • 25% travel (required).

Tech Stack

  • Elasticsearch, Logstash, Kibana, Fleet
  • Python, Bash, Kafka, CI/CD
  • Streamlit, Docker
  • SQL, APIs

Nice to Have

  • Experience with Kafka, Python/Bash automation, CI/CD, or DevSecOps practices.
  • Experience working with Ruby.
  • Experience supporting AWS, Azure, GCP, Oracle Cloud, hybrid-cloud, or multi-cloud environments.
  • Knowledge of cybersecurity operations, including SIEM, threat detection, incident response, and security monitoring.

Security Clearance

Secret (Preferred).

Job Details

  • Job Type: Full-time
  • Location: Hybrid remote in Leesburg, VA
  • Compensation: USD 120,000 - 150,000 per year

Application Question: What is your desired salary requirement?

Similar Jobs