Threat Exposure Analytics Engineer

The Threat Exposure Analytics (TEA) Engineer builds the data pipelines, automation and analytics that give the bank a clear, current view of its cyber exposure. This is a hands-on engineering role: you will pull data from many security and technology sources, transform it, and turn it into reliable datasets and reporting that security leadership can act on.

Key Responsibilities

• Design, build and maintain ETL pipelines that ingest and normalize data from vulnerability, asset, threat and cloud sources.
• Write and optimize SQL and Kusto (KQL) queries to analyze large datasets and support exposure reporting.
• Develop code in Python, Golang, C# or a comparable language to automate data collection, transformation and delivery.
• Automate manual data handling and reporting to improve accuracy, timeliness and repeatability.
• Build and support data solutions on cloud platforms, applying sound data quality and security practices.
• Partner with security, risk and technology teams to translate exposure questions into data requirements and deliverables.
• Document pipelines, data definitions and processes so they can be supported and scaled.

Required Experience

• Prior experience working in financial services or banking is required. Candidates without a financial background will not be considered.
• 8+ years of experience of hands on experience 
• Software development experience in Python, Golang, C# or a comparable language.
• ETL pipeline development.
• Strong SQL and Kusto skills and hands-on data plumbing experience.
• Data automation and transformation.
• Experience with cloud technologies.

Preferred Experience

• Cybersecurity data, such as vulnerability management, asset inventory or threat intelligence.
• Azure data tooling (Azure Data Explorer, Sentinel, Defender) or comparable cloud data platforms.
• Dashboarding and reporting in Power BI or a similar tool.
• Working in a regulated environment, with knowledge of controls and frameworks such as NIST.

Soft Skills

• Clear communicator who can explain data and findings to technical and non-technical stakeholders.
• Self-directed and comfortable working independently in a fully remote team.