Principal Cybersecurity – Metrics, Data Engineering, Risk Insights

AT&T

Principal Cybersecurity position at AT&T developing metrics and Key Control Indicators. Engaging with stakeholders and translating security data into actionable insights.

Posted 5/17/2026full-timeCharlotte • North Carolina • 🇺🇸 United StatesLead💰 $155,400 - $233,200 per yearWebsite

Tech Stack

Tools & technologies

Cyber SecurityETLPythonSQLTableau

About the role

Key responsibilities & impact

Own enterprise cybersecurity metrics & KCIs - Define, implement, and evolve Key Control Indicators (KCIs) focused on control coverage, efficacy, and risk reduction - Ensure metrics are actionable, standardized, and aligned to enterprise risk priorities
Lead requirements & stakeholder engagement - Partner with control owners, cybersecurity operations, and risk teams to gather requirements and translate business questions into measurable indicators - Establish clear metric definitions, assumptions, and narratives to support consistent interpretation
Design and operate the metrics platform - Design and maintain interactive security dashboards and scorecards using Power BI and/or Tableau. Build, test, and maintain ETL/data pipelines to ingest security data from disparate sources into a centralized repository, while ensuring data quality, reliability, scalability, and performance across the metrics ecosystem
Data engineering & analytics excellence - Develop and optimize complex SQL queries to design and maintain data models for complex datasets, including normalization and aggregation strategies. Manage database performance to support operational and executive reporting needs
Translate data into risk insights - Convert security metrics into risk posture narratives and decision‑ready summaries to enable stakeholders to quickly identify gaps, prioritize remediation, and track improvements over time

Requirements

What you’ll need

Degree in Computer Science, Information Technology or related field
7+ years' experience in technology, financial services or other regulated industries
5 years' experience in development of IT risk frameworks and enterprise IT issue management
Strong expertise in SQL, ETL tools, and BI visualization (Tableau, Power BI)
Security metrics and measurement expertise to design actionable security metrics with a focus on control effectiveness and risk reduction, deep understanding of KCI's
Security knowledge and understanding of security operations, controls and risk
Data engineering and modeling experience in designing data models for complex data sets with a strong competency in normalizing and aggregating data to shape the model
Programming proficiency in scripting languages such as Python or PowerShell
Business communications and experience translating KCI's into risk posture narratives with decision-ready summaries
Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring)

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SQLETLdata modelingdata normalizationdata aggregationPythonPowerShellcybersecurity metricsKCIrisk reduction

Soft Skills

business communicationstakeholder engagementrequirements gatheringnarrative translationdecision-making