Security Data Engineer (Cribl)

This is a remote position.

Requirements

Minimum Qualifications - Candidates must meet all minimum qualifications

• Hands-on Cribl data modeling experience.
  
  


• Cribl log-pipeline design and implementation experience.
  
  


• Strong understanding of enterprise security architecture and engineering principles.
  
  


• Experience implementing and supporting enterprise security tools.
  
  


• Exposure to SIEM technologies.
  
  


• Exposure to XDR technologies.
  
  


• Exposure to vulnerability-management technologies.
  
  


• Exposure to Data Loss Prevention (DLP) technologies.
  
  


• Exposure to endpoint-security technologies.
  
  


• Experience developing automation and integrations using Python and/or Bash.
  
  


• Knowledge of cybersecurity best practices.
  
  


• Threat-detection experience.
  
  


• Defensive-security knowledge.
  
  


• Linux operating-system experience.
  
  


• Windows operating-system experience.
  
  


• System-hardening experience.
  
  


• Security-configuration experience.
  
  


• Understanding of networking concepts.
  
  


• Understanding of security protocols.
  
  


• Understanding of secure-system design.
  
  


• 5 years of experience supporting large IT environments and/or enterprise system deployments.
  
  


• Bachelor's degree in an Information Technology-related or Security-related field, or 8 years of relevant professional experience.
  
  

Preferred Qualifications

• Advanced Cribl Stream experience.
  
  


• SIEM administration experience.
  
  


• SIEM analysis experience.
  
  


• SIEM reporting experience.
  
  


• Experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic/Elasticsearch.
  
  


• Experience building and deploying Linux-based security sensors.
  
  


• Enterprise cybersecurity engineering experience.
  
  


• Security architecture experience.
  
  


• Security automation experience.
  
  


• Security-system integration experience.
  
  


• Knowledge of the NIST Cybersecurity Framework (NIST CSF).
  
  


• Knowledge of CJIS requirements.
  
  


• Knowledge of IRS Publication 1075.
  
  


• Knowledge of CMS MARS-E.
  
  


• CISSP certification.
  
  


• Security+ certification.
  
  


• Location in or near South Carolina with the ability to occasionally report onsite.
  
  

Additional Requirements

• Successful completion of a 7-year standard criminal background check.
  
  


• Successful completion of a full credit-history check.
  
  


• Successful completion of a driving-record (MVR) check.
  
  


• Successful completion of a 10-panel drug screen.
  
  


• E-Verify employment eligibility verification.
  
  


• Successful completion of a SLED check.
  
  


• Ability to obtain and maintain annual CJIS certification.
  
  


• Availability for occasional onsite needs in South Carolina if requested; onsite travel is the responsibility of the candidate.
  
  


• Participation in an on-call roster.