{"id":3462487,"url":"https://alion.io/job/guidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote","title":"Senior Security Engineer – Data Pipeline & Observability - Mid-Atlantic region (Remote)","company":{"id":3625,"name":"GuidePoint Security","domain":"guidepointsecurity.com","url":"https://alion.io/company/guidepoint-security","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":23,"ghost_share":0,"stale_share":0.87,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":99000,"max_usd":205000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"Google SecOps","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Okta","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Vector","optional":false},{"name":"Amazon S3","optional":true},{"name":"Ansible","optional":true},{"name":"Apache Kafka","optional":true},{"name":"CI/CD","optional":true},{"name":"CMMC","optional":true},{"name":"Databricks","optional":true},{"name":"FedRAMP","optional":true},{"name":"Git","optional":true},{"name":"HIPAA","optional":true},{"name":"Kubernetes","optional":true},{"name":"PCI DSS","optional":true},{"name":"Snowflake","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-29T13:30:58Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-30T07:47:19Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.\nGeneral Description\nGuidePoint is both a Value-Added Reseller (VAR) and a professional services organization, and an award winning Cribl partner (Cribl Americas Solution Provider Partner of the Year, 2026). In this role you will work directly with our vendor partners and account teams, see the same problems across many client environments, and keep up with a market that is changing quickly.\nSecurity data is growing faster than security budgets. Clients come to us because their SIEM bill is out of control, their data is inconsistent, or they are moving platforms and need the data to arrive clean. You will design and build the pipelines that fix those problems, and you will explain the cost and security trade-offs to the people who pay for them\nAbout our Mid-Atlantic SecOps practice\nOur team of data engineers, SecOps engineers, consultants, architects, and platform specialists focuses on data integration, normalization, quality, routing, retention, and platform optimization. We partner with clients, account executives, project managers, source-system owners, security teams, and technology providers to create supportable data services.\nKey areas of focus include:\nEstablishing reliable and reusable data pipelines.\nImproving data quality, accessibility, and processing efficiency.\nSupporting security, observability, analytics, and operational use cases.\nRoles and Responsibilities: \nArchitect, deploy, and optimize telemetry pipelines with Cribl Stream, Edge, Lake, and Search, and with comparable platforms such as SentinelOne AI Data Pipelines (Observo AI), CrowdStrike Onum, Palo Alto Networks Chronosphere, Datadog Observability Pipelines (Vector), Splunk Edge Processor, and the OpenTelemetry Collector\nOnboard, parse, and normalize data from syslog, agents, cloud provider logs, SaaS APIs, identity (Microsoft Entra ID, Okta), EDR, and network sources into common schemas (OCSF, Splunk CIM, Elastic ECS, Google UDM)\nBuild reduction, filtering, enrichment, and tiering strategies that send only high value data to premium analytics platforms, keep full fidelity copies in low cost storage, and support replay on demand\nQuantify the business cases of baseline ingest, model savings, and present before and after results to technical and financial stakeholders\nBrief client senior leadership (CISO, CIO, CFO) on findings, progress, and recommendations, framed around the customer’s measured business goals (cost avoided, coverage gained, risk reduced, time to investigate) rather than the technical components alone\nSize and harden deployments, including worker topology, high availability and disaster recovery, queuing and backpressure, and fleet health monitoring, across on-premises, cloud, hybrid, and regulated environments\nBuild governance into the data flow with masking and redaction of sensitive data, role-based access control, TLS/PKI, and retention policy\nLead the data workstream of SIEM and platform migrations (for example Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike Falcon Next-Gen SIEM, SentinelOne AI SIEM)\nDeliver pipeline health checks and optimization assessments with prioritized, actionable roadmaps\nSupport pre-sales by joining scoping calls with Solutions Architects and account teams, estimate level of effort, and contribute to statements of work\nWork with vendor partner engineering teams on joint delivery, escalations, and product feedback and maintain current partner certifications\nWork alongside Detection & Response and Automation & AI engineers to establish clean and well routed data to help make detection content, automation, and AI SOC agents more effective for our customers.\nServe as the technical point of contact on engagements, with clear progress reporting, as-built documentation, runbooks, and knowledge transfer to client teams\nContribute to practice intellectual property, including reusable packs, delivery playbooks, and effort baselines, and mentor other engineers\nRequired Experience and Education: \n5+ years in cybersecurity, IT operations, or data engineering, including 3+ years building and running production telemetry pipelines\nHands-on production experience with Cribl Stream or a comparable pipeline platform\nWorking knowledge of at least one SIEM or analytics destination (Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike, or SentinelOne), enough to know what the data must look like when it arrives\nClient-facing delivery experience as a consultant with a services firm, VAR, systems integrator, MSSP, or vendor professional services team, or an equivalent internal role delivering to multiple business units\nLinux administration and networking fundamentals (syslog over TCP/UDP/TLS, load balancing, firewalls), plus logging services in at least one cloud (AWS, Azure, or GCP)\nScripting and data skills: JavaScript, Python, or Bash; regular expressions; REST APIs; JSON, key-value, CSV, and XML formats\nAbility to engage senior leadership and translate technical work into business terms, tying recommendations to the customer’s measurable goals rather than to the technical components alone, in writing and in person\nCribl Certified User and Cribl Certified Admin (Stream), held at hire or earned within 90 days\nEmbraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.\n Preferred Experience and Education\nExperience at a VAR, systems integrator, or MSSP working within vendor partner programs (partner certifications, joint delivery, supporting account teams on deals)\nTechnical writing experience: assessment reports, executive summaries, architecture and as-built documents, and roadmaps written for both technical and executive readers (writing samples welcome)\nDelivery experience on more than one pipeline platform, with the judgment to recommend the right tool for the client\nCribl Certified Admin (Edge); Splunk Certified Admin or Architect; Elastic Certified Engineer; SentinelOne AI Data Pipelines; cloud certifications (AWS, Azure, GCP)\nKubernetes and containers; Terraform or Ansible; Git and CI/CD for pipeline configuration as code\nKafka, object storage and data lakes (Amazon S3, Azure Blob, Cribl Lake), and Snowflake or Databricks as destinations\nOpenTelemetry for metrics and traces, and IT observability use cases alongside security\nFamiliarity with MITRE ATT&CK data sources and what detection engineers need from the data\nRegulated or federal environments (HIPAA, PCI DSS, FedRAMP, CMMC, FIPS); ability to obtain a U.S. security clearance is a plus\nTravel Requirements:\nUp to 15% travel\nPhysical Requirements:\nSedentary work\nSubstantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day\nRequired to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day\nWe use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.\n\nWhy GuidePoint?\n GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.\nFirmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity. \nThis is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.\nSome added perks….\nRemote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)\nGroup Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)\nGroup Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans\n12 corporate holidays and a Flexible Time Off (FTO) program\nHealthy mobile phone and home internet allowance\nEligibility for retirement plan after 2 months at open enrollment\nPet Benefit Option","description_format":"text","description_chars":9320,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible time off","Health insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Managed Security","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-10-29T14:22:27Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 3","filings_12m":4,"filings_prev_12m":12,"green_card_filings_12m":3,"median_offered_wage_usd":126786,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":23,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/guidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote","json_url":"https://alion.io/job/guidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote.json","meta":{"generated_at":"2026-10-30T11:43:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16786,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3625},"rest":"https://alion.io/mcp/rest/get_company?id=3625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fguidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fguidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fguidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/guidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fguidepoint-security-senior-security-engineer-data-pipeline-observability-mid-atlantic-region-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3462487}},{"tool":"search_jobs","arguments":{"company":"guidepointsecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3462487},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}