Principal Data Engineer (Cybersecurity)

Location: US Remote (Boston, Washington DC or Bay Area preferred)

We're delighted to be retained by a Stealth Seed stage cyber security startup in the search for their first Principal Data Engineer who enjoys diving deep into data, understands threat landscapes, and has a knack for building scalable, performant solutions.

About Us

We are a cutting-edge cybersecurity startup committed to staying ahead of emergent threats by leveraging the latest in threat intelligence, offensive security, and detection engineering. Our mission is to revolutionize the way organizations protect their digital assets.

Our Values

• Low Ego
• Empathy for the Customer
• Passion for the Problem
• Learning and Accountability

Position Overview

As a Principal Data Engineer , you’ll wear both analyst and engineer hats, leveraging rich datasets to identify and mitigate threats in real-time. You’ll design and optimize data pipelines, build robust detection capabilities, and explore temporal and unstructured data to enhance our threat analytics engine. You’ll work alongside passionate team members who share a commitment to improving the cybersecurity landscape.

Key Responsibilities

Data Pipeline and Schema Design

• Design efficient, scalable schemas and pipelines for both structured and unstructured data, ensuring optimal performance.
• Optimize data ingestion and real-time streaming for high-throughput systems.

Detection and Analytics Development

• Develop and refine detection logic for endpoint data, focusing on identifying anomalies and emergent threats.
• Analyze rich temporal data to uncover patterns and behaviors indicative of malicious activity.

Threat Intelligence and Detection Engineering

• Apply threat intelligence insights to prioritize detection efforts and improve analytics.
• Build on your endpoint and XDR expertise to craft advanced threat detection models.

Collaboration and Innovation

• Partner with threat detection engineers and threat hunters to improve detection efficacy.
• Innovate with modern tools like GraphDBs, Scala, PySpark, or other data engineering technologies.

Qualifications

• Data engineering experience, with a focus on performance and scalability.
• Strong understanding of endpoint cybersecurity and detection engineering.
• Experience working with AWS (e.g., S3, Lambda, Kinesis).
• Prior roles in data engineering, Tier 3/threat hunting , or similar.
• Proven track record of building detections from endpoint/XDR data.

Preferred Skills

• Experience with temporal data and real-time stream processing.
• Familiarity with Scala, PySpark, or equivalent frameworks.
• Knowledge of GraphDBs and handling unstructured data.
• Strong database schema design skills.

Nice to Haves

• Curiosity, Competency, Creativity, and Velocity in solving complex security problems.
• Experience in both detection engineering and threat intelligence analysis.
• Ability to thrive in a dynamic, fast-paced startup environment.

What We Offer:

• A fast-paced, collaborative startup environment with opportunities for rapid career growth.
• Competitive salary and equity options.
• Comprehensive benefits package (including health, dental, vision, and 401k).
• Access to cutting-edge technology and ongoing professional development.
• Opportunities to attend and speak at conferences, workshops, and security events.