CRIBL Data Modeling Engineer - Enterprise Security # 26-24653

Duration: 12 Months

Daily Duties / Responsibilities:

• This position will serve as a data modeling security engineer focused on CRIBL ingestion within the dept of administrations division of information security. The successful candidate will show extensive experience successfully designing implementing and maintaining data modeling using CRIBL for log ingestion in large scale security environments. This contractor will be working with a large enterprise security team and will assist full-time security architects and engineering staff with the design implementation and integration of CRIBL data modeling to enhance technologies and programs.
• Successful Candidate: This contractor will be primarily focused on data modeling CRIBL pipelines while providing hands-on technical support across multiple security disciplines including but not limited to SIEM XDR vulnerability management data loss prevention (DLP) security awareness endpoint Linux sensor deployment and security automation initiatives. The role requires experience in data modeling information security architecture and solution design to support the strategic planning design implementation and continuous improvement of secure systems and services.

Responsibilities:

• Primarily assist in the planning design deployment and operational support of enterprise security platforms including:
• CRIBL data modeling and log pipeline ingestion
• Security information and event management (SIEM)
• Assist with design and configuration of Linux based security sensors and endpoint monitoring tools
• Secondarily assist in the planning design deployment and operational support of enterprise security platforms including:
• Extended detection and response (XDR)
• Vulnerability management platforms and processes
• Data loss prevention (DLP) solutions
• Security awareness and training platforms
• Collaborate with security architects to design and implement enterprise security solutions that align with leaderships business goals regulatory requirements and organizational risk tolerance.
• Design deploy and manage countermeasures to address known security threats and contribute to mitigation strategies for emerging threats to enterprise data systems and services.
• Ensure consistent application of security controls across enterprise infrastructure and applications; validate control effectiveness and recommend improvements.
• Support incident detection and response activities through monitoring log analysis and reporting.
• Develop technical documentation implementation guides and standard operating procedures as needed.
• Perform other duties as assigned in support of the department of administrations division of information security.

Experience:

• Eight years of relevant work experience may be substituted in lieu of education
• Five years of experience in supporting large IT environments and/or system deployments

Required skills (rank in order of importance):

• CRIBL Data Modeling and Log Pipeline Design and Implementation.
• Strong understanding of enterprise security architecture and engineering principles.
• Experience implementing and supporting enterprise security tools (SIEM XDR Vulnerability Management DLP endpoint security).
• Experience developing automation and integrations using scripting languages such as Python and Bash.
• Knowledge of cybersecurity best practices threat detection and defensive security strategies.
• Experience with Linux and Windows operating systems including system hardening and security configuration.
• Understanding of networking concepts security protocols and secure system design.

Preferred skills (rank in order of importance):

• Hands-on CRIBL data modeling experience.
• Hands-on SIEM administration analysis and reporting experience.
• Experience building and deploying Linux-based security sensors.
• Familiarity with security frameworks and compliance standards such as NIST CSF CJIS IRS 1075 and CMS MARS-E.

Education:

• Bachelors Degree in an Information Technology or Information Security Related Field

Certifications: CISSP Security (Preferred)
Location: Remote (Columbia SC)
Candidate Location: Open to Nationwide candidates.

About US Tech Solutions:
US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions please visit .

US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race colour religion sex sexual orientation gender identity national origin disability or status as a protected veteran.

AI Statement: By applying you acknowledge that AI-assisted tools may be used during hiring.

#LI-AS140

Required Experience:

IC