Data Engineer – Cybersecurity, GRC, AI

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and create scalable batch and streaming pipelines for security data, control evidence, and compliance records.

• Develop data models that support risk indicators, issue tracking, risk acceptance, control testing, audit documentation, and policy exceptions.

• Ensure that risk and compliance information is easily accessible through reporting, dashboards, and self-service analytics.

• Implement data validation, manage metadata, track lineage, and establish access controls.

• Create AI-assisted solutions for evidence summaries, support for control testing, policy searches, security investigations, ticket routing, and exception analysis.

• Utilize retrieval-augmented generation, agentic workflows, and orchestration when applicable.

• Integrate data platforms with GRC tools and enterprise applications via APIs, event-driven integrations, and connectors.

• Set up monitoring and operational documentation to ensure production reliability.

• Collaborate with cybersecurity, risk, compliance, privacy, and legal teams to convert requirements into technical controls and implementation guidance.

• Assist in cybersecurity, GRC, and AI-enabled automation initiatives for the client.

⛳️ Requirements

• Bachelor's degree or equivalent practical experience.

• Minimum of 4 years of experience in data engineering and software development.

• Proficient in Python and SQL.

• Experience in delivering production data pipelines and models for batch processing, streaming, or both.

• Proven track record in deploying solutions using cloud platforms, containers, infrastructure as code, APIs, and secure secrets management.

• Practical experience in applying data governance and security controls, including data classification, PII protection, least-privilege access, encryption, retention policies, audit logs, and metadata or lineage management.

• Experience in supporting GRC processes such as risk reporting, audit requests, control monitoring and testing, compliance measurement, and integrations with GRC platforms.

• Familiarity with developing LLM-enabled applications using RAG, vector or hybrid search, tool or function calling, evaluation and monitoring, prompt-injection protections, and secure data access.

• Willingness to travel up to 25%, based on project requirements.

• Ability to take ownership of deliverables and collaborate effectively across teams.

• Excellent written and verbal communication skills.

• Capability to explain technical concepts to business stakeholders.

• Strong focus on accuracy, documentation, and quality of delivery.

• Experience in leading projects or workstreams and providing practical guidance.

• Capacity to balance competing priorities, meet deadlines, and cultivate productive stakeholder relationships.

• Limited immigration sponsorship may be available.

• Preferred: experience in consulting or with large enterprise clients.

• Preferred: development experience in Java, Go, or JavaScript.

• Preferred: integration experience with ServiceNow GRC, Archer, OneTrust, or BigID.

• Preferred: data experience with SIEM, SOAR, vulnerability management, identity, or cloud security posture platforms.

• Preferred: production experience in LLMOps or MLOps.

• Preferred: relevant security or cloud certifications such as CompTIA Security+, CISM, CISA, CISSP, or a cloud platform certification.

🏝️ Benefits

• Flexible remote work arrangement.

• Contract employment opportunity.

• Chance to engage with modern data platforms and AI automation.

• Opportunity to create reusable architectures, implementation tools, and governance practices.

• Limited immigration sponsorship may be available.

• Travel up to 25%, depending on project requirements.