Data Platform Engineer - Cybersecurity

About the Team

We are a newly formed, forward-looking Cybersecurity Data Engineering & Platform Team driving the future of our enterprise defense strategy. Our mission is to build a next-generation, centralized data lakehouse that unifies all security telemetry into a single, high-performance ecosystem.

Operating across two specialized verticals—Data Logistics (ingestion, enrichment, and semantic layers) and Data Platform (foundational infrastructure, security architecture, and AI enablement)—we are designing a scalable, cloud-native foundation from the ground up.

By combining cutting-edge data architecture with advanced analytics, we empower our threat hunters, data scientists, and incident responders with the real-time, trusted intelligence needed to protect the enterprise at scale.

The Data Platform Vertical

As a member of the Data Platform vertical, you are joining the infrastructure backbone of this global organization. Operating across distributed hubs in Dublin, US, and New Zealand, we are the team responsible for ensuring the underlying architecture is highly performant, automated, and governed by strict enterprise standards.

We are actively moving away from our SIEM-based data platform toward a modern, Infrastructure-as-Code (IaC) model. Crucially, our Dublin team serves as the anchor for our EU Sovereign operations, ensuring our modernized platform meets the strict data residency, isolation, and compliance mandates required to protect our European region.

About the Role

As a Cybersecurity Data Platform Engineer, you will bring hands-on data engineering expertise together with a strong Site Reliability Engineering (SRE) mindset. While our Principal engineers architect the overarching system, your mission is to build, operate, and defend the reliability of our data pipelines and platform — scaling them efficiently and aggressively automating away manual toil.

You will be the primary resource for break-fix, operational troubleshooting, and day-to-day care of our data pipelines and platform tooling, including Splunk during our transition away from a legacy, SIEM-centric environment that suffers from severe resource exhaustion.

Prior Splunk experience is a bonus, not a requirement — we're glad to train the right person who brings strong data engineering, SRE/ops, cloud, and Linux fundamentals.

Crucially, based in our Dublin hub, you will serve as the dedicated platform operator for our EU Sovereign Region. You will ensure that the daily operations, automation, and administration of the platform strictly adhere to European data residency, isolation, and compliance regulations.

In this role, you will be on the front lines of data pipeline and platform health, defining reliability metrics, troubleshooting complex pipeline and infrastructure bottlenecks, and ensuring our Data Engineering and Incident Response teams always have a rock-solid foundation to execute their missions.

What You Will Drive:

- Data Pipeline & Platform Operations: Own the day-to-day administration, break-fix, and operational troubleshooting of our data pipelines and the broader cybersecurity data platform — including Splunk during our SIEM-to-IaC transition — to ensure maximum uptime, data flow integrity, and stability.

- EU Sovereign Administration: Act as the dedicated, hands-on operator for our EU Sovereign Region, strictly adhering to established data residency and isolation protocols in all deployments and incident responses.

- Defending Service Levels & Observability: Define and track Service Level Indicators (SLIs) and Objectives (SLOs) for platform health, compute usage, and storage capacity. You will actively monitor these metrics to proactively troubleshoot bottlenecks before they impact users.

- Toil Reduction & IaC Execution: Treat operations as a software problem. You will utilize, maintain, and write Infrastructure-as-Code (IaC) and automation scripts to eliminate manual operational toil, streamline deployments, and enable auto-scaling.

- Guardrails & Incident Response: Implement resource quotas and technical guardrails to protect the platform from noisy neighbors. When issues do occur, you will lead troubleshooting efforts and participate in blameless post-mortems to ensure systemic issues are fixed in code.

About You

You are an engineer who treats operations as a software problem. You have a deep preference for scripting and automating your way out of repetitive tasks. You understand that in a cybersecurity environment, platform downtime directly impacts enterprise defense, so you are dedicated to defending system stability and uptime.

Most importantly, you understand that supporting a global security mission means following strict rules around access, governance, and compliance.

Basic Qualifications:

- 4+ years of hands-on experience in data engineering, cloud infrastructure operations, platform engineering, or site reliability engineering (SRE)

- 4+ years of experience administering enterprise Linux environments

- 4+ years operating within major cloud platforms (AWS, GCP, or Azure), 2+ years experience with compute, storage, networking, and Identity Access Management (IAM)

- 2+ years of experience building, maintaining, or operating data pipelines (e.g., ETL/ELT, streaming, or batch processing)

Other Qualifications:

- Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field, or equivalent practical experience

- Practical experience managing monitoring, alerting, and logging platforms (Datadog, Prometheus, Grafana)

- Scripting and Infrastructure-as-Code experience (Python, Bash, Go, Terraform, Ansible, CloudFormation)

- Platform, network, application, and cloud security fundamentals

- Familiarity with data residency and EU Sovereign compliance requirements

Base Salary Range:

€70,200 EUR - €105,400 EUR