Cybersecurity Data Engineer – Data Lake / Databricks

Cybersecurity Data Engineer – Data Lake / Databricks

Immediate need for a talented Cybersecurity Data Engineer – Data Lake / Databricks. This is a 06+ months contract opportunity with long-term potential and is located in St. Paul, MN (Onsite).

Pay Range: $50 - $52/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Serve as the primary point of contact for Cyber Data Lake consumers after datasets are available for use.
• Conduct consumer onboarding sessions, workshops, office hours, and stakeholder working sessions to help users access and utilize available Cyber Data Lake datasets.
• Develop and maintain consumer training materials, knowledge articles, FAQs, and adoption resources.
• Help users understand available datasets, platform capabilities, and supported use cases.
• Gather stakeholder feedback and identify opportunities to improve the consumer experience.
• Measure onboarding effectiveness, consumer engagement, and platform adoption.
• Enable consumers to access and understand available cyber datasets.
• Maintain consumer-facing dataset catalogs, usage guidance, and reference documentation.
• Assist users in identifying appropriate datasets for security, compliance, audit, operational, and analytics use cases.
• Support query development, reporting, dashboarding, KPI creation, and analytics initiatives.
• Facilitate analytics working sessions and consumer testing activities.
• Promote best practices for cyber data consumption and analysis.
• Partner with Detection Engineering, Security Operations, and Product Security teams to maximize the value of available telemetry.
• Validate telemetry availability and accessibility for security monitoring and detection use cases.
• Support detection use-case enablement, tuning, validation, and analytics activities.
• Assist investigators and analysts in locating relevant datasets and telemetry sources.
• Identify telemetry gaps impacting consumer use cases and provide consumption insights to onboarding and platform teams to support prioritization and remediation decisions.
• Support security analytics and SIEM use cases without performing operational incident response activities.
• Enable audit, quality, compliance, assurance, and regulatory stakeholders to effectively leverage Cyber Data Lake datasets.
• Support audit evidence requests, compliance reporting activities, and assurance use cases.
• Assist stakeholders in identifying telemetry that supports audit and regulatory requirements.
• Maintain audit and compliance usage guidance and support documentation.
• Identify telemetry gaps that could affect audit readiness or compliance reporting.
• Monitor operational health of onboarded datasets from a consumer perspective.
• Monitor consumer-impacting data quality, availability, latency, and telemetry usability issues and coordinate remediation with platform engineering teams.
• Coordinate with platform and engineering teams to resolve data quality issues affecting analytics, reporting, detections, investigations, or audits.
• Publish data quality metrics, scorecards, and consumer-impact assessments.
• Escalate significant issues that impact platform usability or consumer outcomes.
• Measure and report on platform adoption, utilization, and business value realization.
• Track active consumers, dataset utilization, analytics adoption, and reporting usage.
• Identify underutilized datasets and opportunities to expand consumer adoption.
• Develop executive reporting and dashboards highlighting platform value and outcomes.
• Support forecasting, capacity planning, and strategic growth initiatives through consumption and utilization insights.
• Recommend opportunities to improve platform effectiveness, consumer outcomes, and telemetry coverage.

Key Requirements and Technology Experience:

• Key Skills: Cybersecurity, Databricks / Data Lake Engineering, Data Ingestion & Pipeline Management, SIEM / Security Log Ingestion, Data Quality & Data Governance
• 5+ years of experience in cybersecurity, security analytics, cyber operations, data analytics, SIEM platforms, or cybersecurity data platforms.
• Experience with modern data lake, lakehouse, or analytics platforms such as Databricks, Client, BigQuery, Azure Data Explorer, Synapse, or similar technologies.
• Experience with Security Information and Event Management (SIEM) and security analytics platforms such as Client, Microsoft Sentinel, QRadar, Elastic, Chronicle, ArcSight, or equivalent technologies.
• Experience writing and optimizing SQL queries to support analytics, reporting, dashboarding, and security investigations.
• Strong understanding of cybersecurity telemetry, logging, monitoring, security analytics, and cyber data consumption use cases.
• Experience supporting internal customers in a technical enablement, consulting, or customer-success role.
• Experience with reporting, dashboarding, analytics, and data consumption use cases.
• Experience with SIEM platforms, security data lakes, or large-scale telemetry environments.
• Strong communication, stakeholder management, and training skills.
• Experience operating in regulated and global environments.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Data Analytics, or equivalent experience
• Experience developing user training programs, adoption frameworks, technical documentation, or customer-success initiatives.
• Experience supporting audit, compliance, assurance, or regulatory reporting activities.
• Experience supporting telemetry from connected products, IoT environments, or medical device ecosystems.
• Program or project management experience.
• Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or similar credentials.