Security Engineer - Observability Pipeline

Job title
:
Security Engineer – Observability Pipeline

Corporate title
:
Associate

Department
:
Technology

Location
:
New York City

The pay range for this position at commencement of employment is expected to be between $110,000 and $140,000 annually.

We are seeking a skilled Security Engineer to join our team in building and maintaining a cutting‑edge security observability pipeline using cloud services. This role combines security expertise with cloud engineering to create scalable detection and monitoring capabilities that protect our organization and enhance our security posture.

• Design, build, and maintain security observability pipelines using AWS Kinesis, Lambda, S3, Athena, and related services
• Develop real‑time and batch processing workflows for security event ingestion, enrichment, and analysis
• Implement scalable data processing architectures to handle high‑volume security telemetry
• Design efficient data schemas and models optimized for security analytics and storage

• Create and tune security detections, alerts, and automated response mechanisms
• Develop custom parsers and data transformation logic for various security log sources
• Build correlation rules and behavioral analytics to identify threats and anomalies
• Collaborate on incident response and threat hunting initiatives

• Implement Infrastructure as Code (IaC) using tools like Terraform, Cloud Formation, or CDK
• Design and maintain CI/CD pipelines for security tooling and detection deployment
• Automate security operations workflows and orchestrate multi‑service integrations

• Python proficiency – strong programming skills with experience in data processing, APIs, and automation
• AWS Cloud Services – hands‑on experience with Kinesis, Lambda, S3, Athena, Cloud Watch, IAM, and other core services
• Data Processing – experience with JSON, Parquet, Avro, and CSV parsing and manipulation
• Stream Processing – understanding of real‑time data processing concepts and streaming technologies
• Data Modeling – ability to design efficient schemas for security data storage and analytics
• API Development – experience building and consuming REST/Graph
  
  QL APIs
• Regular Expressions – proficiency in regex for log parsing, pattern matching, and data extraction
• Security Logging & Monitoring – understanding of security event formats, log sources, and monitoring concepts

• SIEM Experience – previous work with security information and event management platforms
• CI/CD Knowledge – familiarity with continuous integration/deployment practices and tools
• Infrastructure as Code – experience with orchestration tools (Terraform, Ansible, Cloud Formation, etc.)
• Detection Engineering – background in creating security detections, rules, and analytics

• Experience with additional AWS services (Event Bridge, Step Functions, ECS/EKS, etc.)
• Knowledge of security frameworks (MITRE ATT&CK, NIST, etc.)
• Familiarity with threat intelligence platforms and feeds
• Experience with data visualization tools (Power
  
  BI, Grafana, Kibana, etc.)
• Background in cloud security and compliance requirements
• Previous work with streaming data platforms (Kafka, etc.)
• SQL proficiency for complex data analysis and querying

• Data Pipeline:
  Kinesis Data Streams/Firehose, Lambda functions, S3 data lakes
• Data Formats: JSON logs, Parquet analytics tables, Avro schemas, CSV exports
• Analytics:
  Athena queries, Cloud Watch dashboards, custom analytics engines
• APIs: RESTful services, Graph
  
  QL endpoints, AWS SDK integrations
• Automation:
  Python scripts, AWS SDK/CLI, infrastructure automation tools
• Security Tools:
  Various SIEM platforms, threat intelligence feeds, security APIs

You are someone who enjoys solving complex technical challenges at the intersection of security and cloud engineering. You have a strong foundation in both security operations and modern cloud architectures, with the ability to translate security requirements into scalable technical solutions. You’re comfortable working with diverse data formats and building robust data processing pipelines that can handle enterprise‑scale security telemetry.

Base pay ranges from $110,000 to $140,000 annually, with additional benefits such as a sign‑on bonus, restricted stock units, discretionary awards, and eligibility for commissions for applicable sales roles. The total compensation package may also include medical, financial, and other benefits such as 401(k) eligibility, paid time off, vacation, sick time, parental leave, and more.

Nomura is an Equal Opportunity Employer