Security & Data Management Specialist

Details

Bloomberg’s Cyber Security Operations Center (CSOC) safeguards the company’s digital environment by monitoring systems and networks for suspicious activity, leading containment and response efforts, formalizing lessons learned, and hardening defenses against future attacks.

CSOC Program Assurance ensures that the CSOC program is delivered in a structured, measurable, and reliable way. The team partners with groups across the firm to improve security incident detection and investigation, verify the effectiveness of security controls, strengthen monitoring capabilities, and ensure the availability and quality of security data.

Responsibilities

Security Data Management

• Own and drive the end-to-end onboarding of security logs required by CSOC monitoring, detection, and investigation platforms.
• Partner with system and data owners across the firm to identify required telemetry, enable log delivery, and resolve technical blockers.
• Act as the technical point of coordination for log ingestion, including format alignment, parsing, normalization, enrichment, and data quality validation.
• Ensure the ongoing health and continuity of log flows by proactively identifying and troubleshooting breaks, delays, and degradation.
• Perform root cause analysis on logging gaps or ingestion failures and coordinate remediation with internal engineering teams and external vendors.
• Maintain accurate documentation, inventories, and standards related to log coverage, ingestion methods, and operational dependencies.
• Evaluate new systems, services, and vendor solutions to determine logging feasibility and monitoring coverage, identifying risks and gaps early.
• Drive improvements in automation, validation, and monitoring of log ingestion pipelines to improve reliability and reduce manual effort.
• Support the rollout of new CSOC use cases, detections, and tools by ensuring required data sources are available and reliable.

Program Assurance and Oversight

• Manage and contribute to initiatives and projects that improve CSOC monitoring capabilities and operational effectiveness.
• Funnel and facilitate audit, risk, and external requests for information, particularly those related to logging, monitoring, and detection coverage.
• Coordinate technical resources working on projects benefiting the CSOC.
• Develop and maintain processes, procedures, and documentation to ensure operational consistency.
• Assemble and present CSOC metrics and KPIs, including measurements related to log coverage, data health, and control effectiveness.
• Measure and help improve the effectiveness of CSOC’s key technical controls to ensure business objectives are met.
• Measure and track services provided to the CSOC by internal and external vendors to verify commitments are met.
• Provide oversight to help ensure the efficacy and completeness of the CSOC’s detection program.
• Generate ideas for continued improvement, including the conceptual design of new threat scenarios.
• Demonstrate sound judgment, a strong sense of ownership, do the right thing, and escalate when appropriate.

Requirements

• Approximately 4–6 years of relevant experience in security operations, infrastructure, or technology roles with a strong technical focus.
• Hands-on experience with log management, security telemetry, or data ingestion pipelines in a production environment.
• Practical experience with SIEM or security analytics platforms such as Splunk and/or CrowdStrike LogScale.
• Strong understanding of security telemetry sources, including operating systems, applications, network devices, identity systems, and security tools.
• Proficiency with cloud technologies and cloud-native logging, including ingesting or consuming logs from major cloud providers.
• Working knowledge of log formats, schemas, parsing, normalization, enrichment, and time synchronization.
• Experience leveraging version control and automated deployment pipelines to support scalable and repeatable log ingestion and data management workflows.
• Proven ability to troubleshoot complex data flow and ingestion issues across multiple teams and vendors.
• Experience coordinating work across system owners, engineers, and external partners.
• Solid understanding of Security Operations Center workflows, detection dependencies, and monitoring use cases.
• Excellent written and verbal communication skills, including the ability to translate technical concepts for non-technical audiences.
• Strong organizational skills, attention to detail, and the ability to manage multiple concurrent priorities in a time-sensitive environment.
• Bachelor’s degree in a relevant field or equivalent practical experience.

Preferred Qualifications

• Exposure to automation, validation, or monitoring mechanisms for log ingestion or data pipelines.
• Experience supporting new detections, monitoring use cases, or threat scenarios through improved data coverage.
• Familiarity with security metrics, KPIs, or data quality reporting.
• Experience supporting security compliance, audit, or regulatory efforts related to logging or monitoring.
• Comfort working in a fast-paced environment where priorities shift and deadlines compress.

Compensation and Benefits

• Annual salary: $190,000–$260,000 USD.
• Benefits and bonus may be included.
• Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs.
• Actual compensation may vary based on geographic location, work experience, market conditions, education, training, and skill level.