Security Data Engineer

Lorien has an exciting opportunity for a Security Data Engineer to join our Defense Technology customer on a direct hire basis. In this role, you'll help build and evolve the data infrastructure that powers our security function & enables the business, empowering access across our teams as they protect mission-critical systems. The ideal candidate brings 5+ years of relevant experience, is comfortable making independent decisions and using sound judgment without heavy oversight, and will enjoy being trusted to steer complex, ambiguous projects from the ground up.

Responsibilities

Partner with internal security teams to define data usage standards and improve search and discovery across security datasets; Build out data pipelines that support every internal security function; Build and maintain a centralized security data lake to support unified, company-wide security data management; Own the design and buildout of scalable log aggregation pipelines across enterprise infrastructure and applications; Design and implement ETL workflows to ingest, transform, and store security data at scale

Requirements

5+ years' overall relevant data engineering experience, ideally with experience executing on security related initiatives; Bachelor's degree in computer science, information systems, engineering, or related technical field; Familiarity with data lake architectures and security data management best practices; Hands-on experience with ETL tooling in large-scale data environments (Spark, DuckDB, or similar); Strong programming ability in one or more general-purpose languages (Go, Rust, Java/Scala, etc.); Working knowledge of infrastructure-as-code tooling (Terraform, AWS CDK, Pulumi) in a production capacity; Experience deploying and maintaining systems in cloud environments, including CI/CD-based delivery; High degree of autonomy, with a track record of owning complex, ambiguous projects end-to-end; Experience building high-volume log ingestion and storage pipelines; Familiarity with AWS, Azure, or GCP-native security tooling and ecosystems; Experience supporting varied access patterns across differently formatted data stores (beyond Splunk); Exposure to open table formats such as Iceberg or Delta Lake; Must be eligible to obtain and maintain a U.S. Top Secret security clearance