CRIBL Engineer

Cribl Engineer

SYSTEMTEC is seeking a Cribl Engineer for a remote opportunity for candidates working EST hours. Candidate will serve as a key contributor to enterprise cybersecurity initiatives, with primary responsibility for designing, implementing, and optimizing Cribl data models and log ingestion pipelines. This role will support a broad range of security technologies and collaborate with architects and engineering teams to strengthen monitoring, detection, and security operations across a large-scale environment.

Required Qualifications of the Cribl Engineer:

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Bachelor's degree in Information Technology, Information Security, Computer Science, or a related field; equivalent experience may be considered in lieu of a degree.
• Minimum five years of experience supporting large enterprise IT environments and security platforms.
• Demonstrated expertise with Cribl data modeling, log pipeline design, and ingestion architecture.
• Strong understanding of enterprise security architecture and cybersecurity engineering principles.
• Experience implementing and supporting SIEM, XDR, Vulnerability Management, DLP, endpoint security, or related security technologies.
• Proficiency with automation and scripting using Python, Bash, or similar languages.
• Experience administering and securing Linux and Windows operating systems.
• Knowledge of networking concepts, security protocols, and secure systems design practices.
• Ability to participate in an on-call support rotation and successfully pass required background screening.

Preferred Skills/Experience of the Cribl Engineer:

• Advanced hands-on experience with Cribl administration, data modeling, and pipeline optimization.
• Experience with SIEM administration, security analytics, alerting, and reporting.
• Experience deploying and supporting Linux-based security sensors.
• Familiarity with cybersecurity frameworks and compliance standards such as NIST, CJIS, IRS 1075, and CMS MARS-E.
• Professional certifications such as CISSP, Security+, or equivalent security credentials.

Responsibilities of the Cribl Engineer:

• Design, implement, and maintain Cribl data models, log pipelines, and ingestion processes to support enterprise security monitoring.
• Support the deployment, administration, and optimization of security platforms, including SIEM, XDR, Vulnerability Management, DLP, and endpoint security solutions.
• Collaborate with security architects and technical teams to develop secure, scalable solutions aligned with organizational objectives and compliance requirements.
• Engineer and maintain security controls, monitoring capabilities, and defensive technologies to address current and emerging threats.
• Assist with incident detection, investigation, and response through log analysis, monitoring, reporting, and security automation initiatives.
• Create and maintain technical documentation, implementation guides, operational procedures, and related security documentation.

Work Location:

Remote. EST Hours.

Compensation / Benefits:

Full-Time Employment with SYSTEMTEC means a competitive salary + paid OT, PTO, holidays, health, dental, disability, and life coverage, 401K, tuition reimbursement and more

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey***.