Security Architect Consultant Data Modeling Engineer; Cribl

Cribl data modeling and log-pipeline engineering is the central requirement for this role

Do not move forward with a candidate unless the required hands-on Cribl experience, enterprise security engineering experience, SIEM experience, Python/Bash scripting, operating-system security experience, rate expectations, screening requirements, education/experience requirements, work-location requirements, and required submission documents have been confirmed.

• Working Title:
  
  Security Architect Consultant Data Modeling Engineer (Cribl)

• Category: IT / Cybersecurity

• Visa: W2 (Independent), Locals

This position is 100% remote

• Location:
  
  Columbia, South Carolina 29210

• Preference will be given to the candidates located in or near South Carolina who can occasionally report onsite are preferred.

• The State of South Carolina is seeking an experienced Security Architect Consultant Data Modeling Engineer with deep hands-on experience using Cribl to design, implement, and maintain enterprise security-data pipelines.

• This is not a general cybersecurity architect or SIEM administrator position.

• The central requirement is hands-on experience with Cribl data modeling, log-pipeline design, implementation, routing, transformation, and delivery of security telemetry into enterprise SIEM environments
  .

• The selected consultant will work alongside full-time security architects and engineers supporting large-scale enterprise cybersecurity initiatives.

• The role combines Cribl engineering with broader hands-on security engineering across SIEM, XDR, vulnerability management, DLP, endpoint security, Linux security sensors, Windows/Linux security configuration, security integrations, automation, threat detection, and defensive security architecture
  .

• Automation is also important. Candidates should demonstrate experience building integrations and security automation using scripting languages such as Python and Bash
  .

• The strongest candidates will have substantial experience operating within complex enterprise security environments rather than simply having exposure to Cribl or SIEM technologies.

The selected consultant will support:

• Cribl data modeling
• Cribl Stream / log-pipeline architecture
• Enterprise log ingestion
• Security-data routing
• Parsing and transformation of security telemetry
• Data normalization and enrichment
• SIEM data delivery and integration
• SIEM administration, analysis, and reporting
• Enterprise security architecture
• Security-tool implementation and support
• XDR technologies
• Vulnerability-management platforms
• Data Loss Prevention / DLP
• Endpoint security
• Linux-based security sensors
• Windows and Linux security configuration
• Security-system hardening
• Cybersecurity automation
• Python scripting
• Bash scripting
• Security integrations
• Threat detection
• Defensive security strategies
• Networking and secure-system design
• Security controls and countermeasures
• Security-control validation
• Incident-detection support
• Enterprise cybersecurity engineering

The selected candidate will:

• Design, build, implement, and maintain Cribl data models and log pipelines
• Develop enterprise security-data ingestion and routing workflows
• Configure pipelines that deliver security telemetry into enterprise SIEM environments
• Perform data parsing, filtering, transformation, enrichment, routing, and normalization
• Work directly with enterprise security architects and engineers
• Support SIEM administration, analysis, and reporting
• Implement and support enterprise security technologies
• Support XDR platforms
• Support vulnerability-management technologies
• Support DLP technologies
  
  Support endpoint-security platforms
• Build and deploy Linux-based security sensors
• Support Linux and Windows security configuration and hardening
• Develop security automation and integrations using Python and Bash
• Support enterprise threat-detection capabilities
• Assist with defensive-security engineering
• Support security-control implementation and validation
• Participate in enterprise security architecture discussions
• Support incident-detection activities
• Troubleshoot complex security-data and integration issues
• Support secure networking and system-design initiatives
• Participate in the required on-call rotation

The candidate must have:

Hands-on Cribl data modeling experience

Cribl log-pipeline design and implementation experience

Strong understanding of enterprise security architecture and engineering principles

Experience implementing and supporting enterprise security tools

Security-tool…