Staff Security Data Engineer

GitHub is hiring a Staff Security Data Engineer to build and maintain scalable security data infrastructure across Azure and AWS. The role supports security monitoring, threat detection, hunting, incident response, and investigations by developing data pipelines and models and advancing security telemetry governance and policies.

Responsibilities:

• Design, build, and maintain secure, reliable, and scalable data infrastructure in Azure, and AWS, including Terraform-managed resources, Kusto clusters and tables, and Airflow-orchestrated ETL pipelines
• Lead cross-organizational initiatives to onboard new security telemetry, and identify and close visibility gaps
• Establish and advance data governance practices for security telemetry, including highly sensitive data sources
• Define and drive adoption of security telemetry policies and standards, partnering with Security teams and service owners to identify and remediate gaps
• Provide technical leadership to projects focused on the data platforms and infrastructure that supporting security monitoring, threat detection, hunting, investigations, and incident response

Requirements:

• 10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area OR equivalent experience
• 5+ years of hands-on experience building and maintaining cloud scale Azure infrastructure
• 3+ years of deep experience with Kusto and KQL, Apache Airflow, Terraform, and Python in production environments
• 2+ years experience leading complex initiatives across organizational boundaries , aligning stakeholders, and translating operational requirements into durable technical solutions
• Experience collaborating with Security Operations and Engineering teams around security telemetry requirements
• Experience supporting Security Operations disciplines such as Threat Detection, Incident Response, Threat Intel, and/or Red Teaming
• Experience leveraging AI workflows, where appropriate, to drive improved security outcomes
• Experience designing near-real-time telemetry ingestion using Azure Event Hubs or comparable technologies
• Experience establishing observability, reliability, data-quality, and cost-management practices for data platforms