[Remote] Cribl Engineer (Security Data Pipelines)

Note: The job is a remote job and is open to candidates in USA. InfoLabs is seeking a Cribl Engineer to support the security team of a state government agency in a fully remote, 12-month contract role. The engineer will design security data models, build Cribl pipelines that ingest logs into the SIEM, and support SIEM, Linux security sensors, XDR, vulnerability management, and DLP tools.

Responsibilities

• You'll own the Cribl side of a large enterprise security environment
• That means designing the data models and building the pipelines that bring security logs into the SIEM
• You'll also help with SIEM work, Linux security sensors, and support for XDR, vulnerability management and DLP tools
• You'll work alongside the agency's full-time security architects and engineers

Skills

• Must be authorized to work in the US for any employer without sponsorship, now or in the future
• Hands-on Cribl Stream experience in production. You built the pipelines yourself, not just trained on them
• Solid security engineering background with SIEM, XDR, vulnerability management, DLP or endpoint tools
• Python and Bash scripting
• Linux and Windows hardening, plus a good grasp of networking and security protocols
• 5+ years supporting large IT environments
• Bachelor's in IT or security, or 8+ years of experience in its place
• A Cribl certification
• Hands-on SIEM admin (Splunk, Sentinel or similar)
• Experience building Linux-based security sensors
• Familiarity with NIST CSF, CJIS, IRS 1075 or CMS MARS-E
• CISSP or Security+

Benefits

• 100% remote; work from anywhere in the US
• 12-month contract with a good chance of extension

Company Overview