Cyber Data Engineer- Glasgow

FDM is a global business and technology consultancy seeking a Cyber Data Engineer to work for our client within the Financial Services sector. This is initially a 6-12 month contract with the potential to extend and will be a hybrid role that will be based in Glasgow.

Our client is seeking a Cyber Data Engineer to join its globally distributed security analytics team.

The team is responsible for developing and supporting platforms used by cyber functions including security response, investigations and insider-threat teams. A key focus of the position will be supporting the migration of the firm’s cyber data lake from Splunk to CyberELK, an Elasticsearch-based security analytics platform.

This role would suit an engineer with a strong grounding in Python, infrastructure automation, Linux and data pipelines who is interested in developing deeper expertise in Elasticsearch and cybersecurity engineering.

Responsibilities

A successful applicant will contribute to several important initiatives including:

• Developing automation tools that integrate with in-house developed configuration management frameworks and APIs, including our AI-assisted onboarding tooling
• Onboarding data sources into CyberELK with appropriate field extractions and Elastic Common Schema (ECS) mapping
• Tuning and optimising Elasticsearch cluster performance, including sharding, index lifecycle management (ILM) and ingest pipelines
• Providing consultancy to internal clients and stakeholders
• Working as an escalation point to perform complex troubleshooting, working with other infrastructure teams to resolve issues