Security Data Engineer (Cribl)

Candidates must meet all minimum qualifications

Hands-on Cribl data modeling experience.

Cribl log-pipeline design and implementation experience.

• Strong understanding of enterprise security architecture and engineering principles.
• Experience implementing and supporting enterprise security tools.
• Exposure to SIEM technologies.
• Exposure to XDR technologies.
• Exposure to vulnerability-management technologies.
• Exposure to Data Loss Prevention (DLP) technologies.
• Exposure to endpoint-security technologies.
• Experience developing automation and integrations using Python and/or Bash.
• Knowledge of cybersecurity best practices.
• Threat-detection experience.
• Defensive-security knowledge.
• Linux operating-system experience.
• Windows operating-system experience.
• System-hardening experience.
• Security-configuration experience.
• Understanding of networking concepts.
• Understanding of security protocols.
• Understanding of secure-system design.
• 5 years of experience supporting large IT environments and/or enterprise system deployments.
• Bachelor's degree in an Information Technology-related or Security-related field, or 8 years of relevant professional experience.
• Advanced Cribl Stream experience.
• SIEM administration experience.
• SIEM analysis experience.
• SIEM reporting experience.
• Experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic/Elasticsearch.
• Experience building and deploying Linux-based security sensors.
• Enterprise cybersecurity engineering experience.
• Security architecture experience.
• Security automation experience.
• Security-system integration experience.
• Knowledge of the NIST Cybersecurity Framework (NIST CSF).
• Knowledge of CJIS requirements.
• Knowledge of IRS Publication 1075.
• Knowledge of CMS MARS-E.
• CISSP certification.
• Security+ certification.
• Location in or near South Carolina with the ability to occasionally report onsite.

Successful completion of a SLED check.