1. Onboarding, transforming, validating and delivering telemetry/log/event sources into SMA platforms using scalable, reusable ingestion patterns.
2. Maintain data quality and integrity by monitoring accuracy, reliability and completeness of data flows (including event loss detection and monitoring of log volumes) into SIEM/SOAR and analytics systems.
3. Support configuration, troubleshooting and optimisation of data ingestion pipelines and ingestion tooling to keep data flows reliable and performant.
4. Ensure data schemas, mappings, transformations and end-to-end data flows are documented and aligned with SMA governance and standards.
5. Implement and maintain clear data lineage, ownership tags and metadata for all onboarded sources to meet governance and data governance control requirements and support regulatory needs.
6. Support data-related incident response and root-cause analysis for data outages, event loss and excessive volumes; drive remediation and improvements.
Core competencies, knowledge and experience:
1. Experience building and operating data pipelines for ingestion,
transformation and validation (DataOps / data engineering experience).
2. Strong scripting capability (e.g., Python and Bash) and ability to automate repetitive data checks and operational workflows.
3. Experience implementing automated data checks / quality assurance and using monitoring/validation to maintain trustworthy data delivery.
4. Understanding of security and reliability expectations in cyber environments; comfortable supporting root cause analysis for production issues.
5. Strong stakeholder engagement and cross-team collaboration skills to work with engineering, operations and wider stakeholders on onboarding requirements and constraints.
Desired but not essential:
1. Knowledge of cloud platforms (e.g. GCP) and data solutions (e.g.
2. Working knowledge of automation and workflow tooling and experience designing procedures for system maintenance and troubleshooting.
3. Experience working in a DevSecOps / ITOps workplace supporting security data platforms.