Security Architect / Cribl Engineer - Remote - SASC#02

Job Description

Job Description

Job Title: Security Architect / Cribl Engineer
Duration: 12+ Months
Location: 100% Remote

Position Overview

We are seeking an experienced Security Architect / Cribl Engineer to design and manage enterprise security data pipelines, with a primary focus on Cribl ingestion and data modeling. The role will also support SIEM, endpoint security, Linux sensors, and security operations.

Required Skills

• Strong hands-on experience with Cribl data modeling and log pipeline design.

• Experience with enterprise security architecture and engineering.

• Experience with SIEM, XDR, DLP, vulnerability management, and endpoint security.

• Experience with Python and Bash scripting.

• Experience with Linux and Windows security configuration.

• Understanding of networking concepts, security protocols, and secure system design.

Key Responsibilities

• Design, build, and maintain Cribl pipelines for enterprise log ingestion.

• Develop data models, transformations, routing, filtering, and enrichment processes.

• Integrate Cribl with SIEM and other enterprise security platforms.

• Troubleshoot ingestion, parsing, routing, and data-quality issues.

• Support Linux security sensor and endpoint monitoring deployments.

• Develop automation and integrations using Python and Bash.

• Assist with security monitoring, threat detection, and incident response.

• Review security controls and recommend architecture improvements.

• Develop technical documentation, implementation guides, and procedures.

Preferred Skills

• Advanced Cribl administration and data modeling experience.

• SIEM administration, analysis, and reporting experience.

• Linux-based security sensor deployment experience.

• Familiarity with NIST CSF, CJIS, IRS 1075, and CMS MARS-E.

Education & Experience

• Bachelor's degree in IT, Information Security, or related field, or equivalent experience.

• 8 years of relevant experience.

• 5 years supporting large IT environments or system deployments.

Preferred Certifications

• CISSP

• Security+