Federal Cybersecurity Senior Advisor – Security Data Management (SDM)
Organization: Dell Security & Resiliency – Cybersecurity Engineering and Operations The Dell Security & Resiliency organization manages the security risk across all aspects of Dell's business. We are currently experiencing incredible growth to meet the security needs of the world's largest technology company. With team members located in over 15 countries, you will have an excellent opportunity to influence the security culture at Dell and further develop your career .
Join us as a Federal Cybersecurity Senior Advisor – Security Data Management (SDM) on our Cybersecurity Engineering and Operations team to do the best work of your career and make a profound social impact.
What You'll Achieve
As a Federal Cybersecurity Senior Advisor on the Security Data Management (SDM) team, you will be a key technical contributor in advancing Dell's cybersecurity visibility, threat detection, and observability capabilities. You will implement, operate, and continuously improve logging, monitoring, and data pipeline solutions that empower security teams with actionable insights and reduce response times. You will leverage technologies such as Splunk, Elastic Stack, Cribl, and NDR platforms while contributing to Dell's evolution toward AI-enabled, data-driven security operations .
This role emphasizes hands-on execution, optimization, and operational excellence — delivering reliable, high-quality security data capabilities that strengthen the organization's resilience against evolving threats.
Key Responsibilities
- Lead the implementation, configuration, and administration of enterprise logging and monitoring platforms, including Splunk, Elastic Stack, and Cribl, while developing dashboards, alerts, correlation searches, and reporting capabilities.
- Design, build, and maintain security data pipelines, ensuring reliable log ingestion, transformation, normalization, enrichment, and data quality using tools such as Cribl and Vector.
- Develop and support scalable observability and logging infrastructure leveraging Docker, Kubernetes, virtualized environments, Dell ECS, and PowerScale for data retention, monitoring, and analytics.
- Create automation and integrations using Python, Bash, and PowerShell to streamline data collection, configuration management, operational processes, and security monitoring workflows.
- Optimize logging platform performance and support threat detection, incident response, forensic investigations, and AI-enabled security operations through high-quality, analytics-ready data and robust observability practices.
- Ensure compliance with security and regulatory frameworks including NIST, MITRE ATT&CK, and CIS, while supporting audit readiness, risk assessments, privacy requirements, and AI governance controls.
- Drive platform reliability and continuous improvement by developing runbooks, monitoring service health, participating in incident response, identifying operational gaps, and implementing scalable remediation and automation solutions.
Essential Requirements
-
USA Citizen
-
Education: Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent experience) .
-
Experience: 10–12 years of experience in cybersecurity engineering, with a focus on logging, monitoring, data management, and infrastructure.
-
Strong hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana), Cribl, and Splunk Enterprise/Cloud .
-
Proficiency in Kubernetes, Docker, and CI/CD pipeline integration .
-
Experience with Dell ECS, PowerScale, and virtual machine environments .
-
Scripting skills in Python, Bash, or PowerShell .
-
Strong ability to operate production systems with accountability to KPIs and outcomes.
-
Solid communication skills and ability to collaborate across technical and non-technical teams .
Desirable Requirements
-
Familiarity with NDR technologies such as NetWitness, Corelight, or ExtraHop .
-
Knowledge of additional logging/SIEM technologies: Microsoft Sentinel, Palo Alto Strata .
-
Experience with pipeline technologies such as Cribl, Vector .
-
Exposure to security data and analytics engineering: log/telemetry pipelines, schema governance, normalization/enrichment, and query-driven analytics.
-
Familiarity with AI/ML-assisted security operations concepts, agentic AI safety practices, or secure-by-design principles for automated workflows.
-
Experience with cloud-native logging/analytics platforms, time-series/log query languages, and data ingestion/transformation patterns.
-
Industry certifications such as: CISSP, GCIA, GCIH, GMON, Splunk Certified Power User/Admin, CCNA, CCNP, PCNSA, PCNSE .
