Security Telemetry

Security Telemetry Engineer Jobs

3 jobs found

27d ago

Data Security Engineer (Tuning)

Deloitte Colorado Springs, CO

Colorado Springs, CO

27d ago

$96k - $159k/yr Full time Cloud Platforms Cybersecurity Data Data

Apply Now

Job Description

Own and optimize end-to-end security telemetry pipelines and tuned detection logic across enterprise and cloud environments.

Responsibilities

Own end-to-end security telemetry pipelines that support network traffic monitoring, threat hunting, custom detection engineering, and adversary detection
Work backward from detection objectives to define data sources, collection methods, telemetry fields, retention, and data-quality controls to improve detection coverage
Architect, build, and maintain telemetry pipelines for network, endpoint, identity, cloud, application, OT, and security-infrastructure data and deploy it into centralized and distributed detection solutions
Ingest and operationalize telemetry sources including NetFlow, packet capture (PCAP), VPC flow logs, firewall and proxy logs, and DNS records
Define telemetry needs for network monitoring, threat hunting, incident response, and custom detection engineering by mapping detection goals to underlying data sources
Assess visibility gaps across on-premises, cloud, remote, and segmented environments
Normalize, enrich, parse, validate, and maintain telemetry using OCSF or CIM standards so data is queryable and available for correlation
Troubleshoot ingestion and detection pipeline issues including parsing, latency, retention, field coverage, and data-quality across SIEM, data lake, analytics, and detection platforms
Design, write, deploy, and tune high-fidelity detection logic using SQL, Sigma, YARA-L, or Python for network-based techniques such as command-and-control beaconing, data exfiltration, and lateral movement
Reduce false positives while maintaining detection signal and support custom detection development through data discovery, enrichment, normalization, validation, and behavioral/tradecraft-based detection
Partner with network engineering and stakeholders to evaluate sensors and telemetry sources including NetFlow/IPFIX, DNS and proxy telemetry, firewall logs, IDS/IPS, PCAP, Zeek, network metadata, and NDR platforms
Create telemetry health metrics, dashboards, and automated checks for missing, delayed, or malformed data and optimize for performance, scalability, reliability, and cost

Requirements

Associate degree and 6+ years in data engineering, data integration, security engineering, or security operations; or bachelor's degree and 3+ years in the same areas
Active TS/SCI or SCI eligibility is required
3+ years conducting data investigations and using scripting languages for data engineering workflows
+ years of experience using SQL and Python to transform, validate, or analyze data
Experience using MITRE ATT&CK for security log design
Experience configuring or tuning data ingestion, parsing, normalization, or enrichment for security data
Experience using a SIEM, log management platform, or security data lake
Ability to travel 10%, on average
Must be legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

Structured Query Language (SQL)
Python
Sigma
YARA-L
OCSF (Open Cybersecurity Schema Framework)
CIM (Common Information Model)
MITRE ATT&CK
NetFlow
PCAP (packet capture)
VPC flow logs
DNS
IPFIX (Internet Protocol Flow Information Export)
IDS/IPS (intrusion detection and prevention systems)
Zeek
NDR (network detection and response)
SIEM (security information and event management)
CI/CD
AWS, Microsoft Azure, GCP

Team

Deloitte’s Government & Public Services (GPS) practice serves federal, state, & local government clients and public higher education institutions
Enterprise Security embeds security in digital transformation by securing a client’s technical backbone while enabling secure digital transformation
Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products
Project Delivery Talent Model ties employment to a role on a project

Preferred

Cyber threat hunting
Experience with cloud data or security services in AWS, Azure, or GCP
Experience with version-control and CI/CD tooling to deploy engineering changes

Logistics and Compensation

Location: Colorado Springs, CO (onsite)
Salary (Colorado estimate): $95,600 to $159,300 per year
Recruiting end date: 11/30/2026

View full job page →

1mo ago

CYBERSECURITY ENGINEER III - 72004172

The State of Florida Tallahassee, FL

Tallahassee, FL

1mo ago Closed

$80k - $115k/yr Full time Cybersecurity Tools Detection Engineering Endpoint Security

This position is no longer accepting applications (closed Nov 6, 2026).

Job Description

The State of Florida is hiring a Cybersecurity Engineer III in Tallahassee, FL (onsite). This role supports enterprise SOC enablement by engineering security tooling and telemetry pipelines that help improve detection, investigation, and incident response workflows.

You will work hands-on with SIEM, SOAR, EDR, and security data platforms to configure and sustain the systems that power analytic and operational processes across the organization. The position also emphasizes continuous improvement, documentation, and collaboration with SOC, engineering, architecture, IT, data, and cybersecurity teams.

Responsibilities

Configure, maintain, and support enterprise security tools including SIEM, data platforms, SOAR, and related detection and telemetry systems.
Support ingestion, parsing, normalization, and retention of security telemetry so data remains usable for detection and investigation.
Monitor performance and availability of security tooling and flag issues impacting SOC operations.
Evaluate telemetry sources for relevance, quality, and operational usefulness.
Develop, implement, and maintain SIEM detections using structured detection logic and defined standards.
Tune and validate detection rules to improve accuracy, reduce false positives, and maintain operational effectiveness.
Translate detection requirements into platform-specific implementations.
Test and validate detections and telemetry pipelines in development and production environments.
Troubleshoot and resolve issues involving security tools, integrations, and telemetry pipelines, including root-cause analysis for detection failures and data gaps.
Provide technical support during incident response activities when tooling or telemetry expertise is needed.
Implement and maintain security tool and integration configurations aligned with established standards and architecture.
Support deployment, updates, and lifecycle management of detections, data sources, and platform components.
Assist with integrating new telemetry sources and security capabilities into existing platforms.
Follow established change management and configuration management processes.
Develop and maintain technical documentation, runbooks, and standard operating procedures.
Identify opportunities to improve detection coverage, telemetry quality, and platform performance.
Support continuous improvement initiatives related to security tooling, engineering processes, and SOC enablement.
Participate in testing and validation of new tools, features, or integrations.
Work with SOC analysts to understand detection requirements and operational challenges.
Coordinate with engineering and architecture teams to support implementation of new capabilities.
Collaborate with IT, data, and cybersecurity teams to support integrations and enterprise initiatives.
Participate in team activities, projects, and knowledge-sharing efforts.
Other duties as assigned.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent professional experience may be considered in lieu of a degree.
3+ years of experience in cybersecurity engineering, security operations, or related technical roles.
Hands-on experience configuring or supporting security tools such as SIEM, EDR, SOAR, or log/data platforms.
Experience working with security telemetry, logs, or data pipelines used for monitoring and detection.
Demonstrated experience developing, tuning, or supporting detection rules or alerting logic in a SOC or similar environment.
Experience troubleshooting technical issues involving security tools, integrations, or data quality.
Familiarity with incident response processes and supporting tooling or data requirements.
Experience following change management or configuration management processes.
Strong written and verbal communication skills.
Relevant professional certifications such as CISSP, CCSP, cloud security certifications, or equivalent (preferred).

Technologies

SIEM
SOAR
EDR
Log/data platforms
Security data platforms
Security telemetry

Work Location and Physical Requirements

Tallahassee, FL (onsite). Additional position requirements include ability to sit and stand for extended periods of time, ability to drive and/or fly long distances, and ability to lift, push, and pull up to 30 lbs.

Compensation: USD 80,000 - 115,000 per year.

View full job page →

1mo ago

Senior Network Security Engineer

Microsoft Redmond, WA

Redmond, WA

1mo ago Closed

$120k - $261k/yr Full time Senior Ansible Application Security

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Microsoft Specialized Clouds (MSC) is hiring a Senior Cloud Network Security Engineer in Redmond, WA (onsite). The role designs, deploys, and operates network security monitoring for sovereign and government cloud environments, with ownership across telemetry, threat detection, alerting, automation, and day-to-day security operations.

Responsibilities

Design, deploy, and manage network security platforms including firewalls, proxies, and traffic inspection solutions that support sovereign cloud environments.
Configure network security devices to export logs, flow records, packet telemetry, and security events to centralized monitoring, analytics, and incident response platforms.
Develop and maintain network security detections, alerts, and analytics to identify malicious activity, unauthorized access, policy violations, and emerging threats.
Analyze packet captures, firewall logs, flow data, and network telemetry to support threat investigations, incident response, root cause analysis, and service improvements.
Build and maintain security telemetry pipelines that deliver actionable visibility across network infrastructure, cloud services, and security platforms.
Develop automation solutions using scripting, Infrastructure as Code, and AI-enabled capabilities to improve detection engineering, alert correlation, incident triage, and operational efficiency.
Integrate network security telemetry, observability, and incident management platforms to improve monitoring coverage and response effectiveness.
Create operational dashboards, reporting, and health metrics to measure detection coverage, alert quality, service reliability, compliance posture, and operational risk.
Partner with engineering, security, and operations teams to define secure network architectures, monitoring standards, deployment patterns, and onboarding requirements for new services.

Requirements

Doctorate in Statistics, Mathematics, Computer Science, or related field.
OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology.
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology.
OR equivalent experience.
Microsoft Cloud background check required to pass upon hire/transfer and every two years thereafter.
Verification of U.S. citizenship via a valid passport due to citizenship-based legal restrictions.

Preferred Qualifications

2+ years of experience using AI technologies to improve security operations, detection engineering, alert correlation, incident investigation, and operational workflows.
2+ years of experience supporting government, regulated, or sovereign cloud environments.
10+ years of experience designing, deploying, or operating network security infrastructure and services.
5+ years of experience with firewalls, DDoS protection, IDS/IPS platforms, proxies, traffic inspection, and network security controls.
5+ years of experience automating operational processes using Python, Terraform, Ansible, Bicep, ARM, or similar technologies.
3+ years of experience configuring security devices to export telemetry, logs, events, and flow data for centralized monitoring and threat analysis.
3+ years of experience developing security detections, alerting strategies, monitoring content, and operational response processes.
5+ years of experience supporting production services, incident response, operational ownership, and on-call rotations.

Technologies

Python
Terraform
Ansible
Bicep
ARM

Additional Information

Embodiment of Microsoft Culture & Values.

Compensation and Location

Location: Redmond, WA (onsite). Salary: USD 119,800 - 261,000 per year.

View full job page →

Security Telemetry Engineer Jobs

Data Security Engineer (Tuning)

CYBERSECURITY ENGINEER III - 72004172

Senior Network Security Engineer

Get Security Telemetry Engineer Jobs alerts