Join a mission-focused team supporting the Department of State Diplomatic Security Cyber Mission (DSCM). In this hybrid role in Beltsville, MD or Washington DC, you will help onboard and maintain the Cyber Event Data Node (CEDN), a centralized cloud-based platform that collects, processes, enriches, normalizes, stores, and distributes cybersecurity data for operational and analytical use. You’ll build reliable data pipelines and contribute to data quality, integration, and operational readiness for both classified and unclassified environments.
What you’ll do
- Support onboarding of new cybersecurity systems and data sources into the CEDN environment.
- Partner with system owners, cybersecurity analysts, architects, and engineers to define source data, collection requirements, formats, schemas, data volumes, retention needs, and downstream use cases.
- Configure and maintain Cribl pipelines for collection, routing, parsing, transformation, enrichment, compression, filtering, and replay.
- Assist with developing and maintaining Databricks pipelines for raw, enriched, and normalized data layers in Delta Lake.
- Build and maintain Python, SQL, and scripting solutions that automate ingestion, transformation, validation, and reporting.
- Map structured, semi-structured, and unstructured data into standardized schemas and security data models.
- Perform data-quality checks for completeness, accuracy, timeliness, formatting, and successful delivery to downstream systems.
- Troubleshoot ingestion failures, malformed events, schema changes, pipeline errors, latency, and other data-flow issues.
- Support integrations with cybersecurity and analytics platforms including Splunk Cloud, ServiceNow, Power BI, Tableau, and other authorized consumers.
- Apply metadata, tagging, access controls, and data-handling requirements for classified and unclassified environments.
- Monitor pipeline health, throughput, storage consumption, and processing performance; help identify optimization opportunities.
- Create and maintain onboarding checklists, data-flow diagrams, interface documentation, configuration records, test plans, standard operating procedures, and troubleshooting guides.
- Participate in testing and validation activities before new data sources move into production.
- Work within established change-management, configuration-management, security authorization, and system development lifecycle processes.
- Collaborate with senior data engineers, security engineers, data scientists, threat analysts, and mission stakeholders to translate operational needs into dependable data products.
- Support knowledge transfer and provide basic technical guidance to data owners and platform users.
What you bring
- Bachelor’s degree in computer science, information systems, data science, cybersecurity, engineering, or a related technical field, plus 1–2 years of experience (or four additional years of relevant experience in lieu of a degree).
- Ability to possess or obtain prior to start and maintain one certification: CCNA Security, CEH, CISSP, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.
- Foundational experience with data engineering, data integration, ETL/ELT, application integration, or log-management technologies.
- Working knowledge of Python and SQL.
- Familiarity with structured and semi-structured formats such as JSON, CSV, XML, syslog, and API-delivered data.
- Understanding of databases, data lakes, data pipelines, schemas, metadata, and data lifecycle concepts.
- Basic knowledge of cloud computing and cloud storage services.
- Ability to analyze technical documentation and translate system requirements into actionable data-integration tasks.
- Ability to document configurations, testing results, data mappings, technical procedures, and operational issues clearly.
- Strong analytical, troubleshooting, organizational, and communication skills, with the ability to manage multiple assignments and established deadlines.
- U.S. citizenship required. Active Secret clearance required, with ability to obtain a final Top Secret clearance.
Technology stack you’ll work with
- Cribl (Cribl Stream, Cribl Edge), Databricks, Apache Spark, Delta Lake, Python, SQL
- JSON, CSV, XML, syslog, API, Splunk Cloud, ServiceNow, Power BI, Tableau
- Git, CI/CD, Infrastructure as Code, DevSecOps, Microsoft Azure, Azure Data Lake Storage
- Notebooks and lakehouse architectures
Benefits
- Medical, Dental, Vision
- Life insurance
- Health savings account
- Short/long term disability
- EAP
- Parental leave
- 401(k)
- Paid time off (PTO) for vacation
- Company paid holidays
Role details
Salary range: USD 66,000 - 106,000 per year. Location: Beltsville, MD or Washington DC (hybrid). Occasional telework is flexible, with the requirement that the candidate is local to the work location.
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. The DSCM program provides technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support to protect the Department’s global infrastructure, systems, information, and mobile devices from cyber risks and threats.
