Security Data Engineer

Team: Data Engineering

Location: Budapest

Commitment: Fixed term

Workplace Type: hybrid

Responsbilities:

Design, maintain, and optimize log ingestion pipelines for Elasticsearch, Kibana, and OpenSearch environments.
Normalize and standardize log data using OpenTelemetry Semantic Conventions and industry best practices.
Onboard, categorize, and enrich new security log sources to improve visibility and investigation capabilities.
Support SOC and Detection Engineering teams by enabling cross-source correlation and high-fidelity alerting.
Ensure data quality, schema consistency, and reliable operation of the security logging infrastructure.

Requirements:

3+ years of experience in Data Engineering, Security Operations, Observability, or a related field.
Hands-on experience with Elasticsearch, Kibana, OpenSearch, and log ingestion technologies such as Logstash, Fluentd, Fluent Bit, or Beats.
Strong understanding of log formats, data normalization, OpenTelemetry, and/or Elastic Common Schema (ECS).
Proficiency in Python, Go, or Node.js for building parsers, transformations, and enrichment services.
Experience with Kafka, Filebeat, Logstash, or similar data pipeline technologies.
Familiarity with SIEM/SOC environments, detection engineering concepts, and security event correlation.
Knowledge of MITRE ATT&CK, threat detection, and anomaly detection is an advantage.