[Hiring] Cribl Engineer @SYSTEMTEC

Role Description

Candidate will serve as a Data Modeling Security Engineer responsible for designing, implementing, and maintaining enterprise-scale Cribl data models and log ingestion pipelines. The role will also provide hands-on security engineering support across:

• SIEM
• XDR
• Vulnerability management
• Endpoint security
• DLP
• Linux sensors
• Security automation

Qualifications

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• 5+ years of experience supporting large-scale IT environments, enterprise infrastructure, and/or system deployments.
• Hands-on experience with Cribl data modeling, log ingestion, pipeline development, data transformation, and routing.
• Strong understanding of enterprise security architecture, security engineering principles, and secure system design.
• Experience implementing and supporting enterprise security platforms, including SIEM, XDR, vulnerability management, DLP, and endpoint security solutions.
• Experience developing automation, integrations, and operational tooling using Python, Bash, or similar scripting languages.
• Strong knowledge of cybersecurity best practices, threat detection, incident monitoring, and defensive security strategies.
• Experience administering, hardening, and securing Linux and Windows operating systems.
• Understanding of networking fundamentals, security protocols, authentication, and secure infrastructure configurations.
• Bachelor's degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field; eight years of relevant experience may substitute for the degree.
• At least five years of experience supporting large IT environments and/or system deployments.

Requirements

• Extensive hands-on experience designing and optimizing Cribl data models and production log pipelines.
• SIEM administration, security analytics, data onboarding, and reporting experience.
• Experience deploying and supporting Linux-based security sensors.
• Familiarity with NIST CSF, CJIS, IRS 1075, and CMS MARS-E requirements.
• CISSP and/or Security+ certification.

Responsibilities

• Design, implement, maintain, and optimize Cribl pipelines and data models for large-scale security log ingestion and telemetry management.
• Support the planning, deployment, configuration, and operation of SIEM, XDR, vulnerability management, DLP, endpoint monitoring, and related security platforms.
• Develop security automation and integrations while assisting with Linux sensor deployment, system hardening, and security configuration.
• Work with security architecture and engineering teams to develop solutions aligned with organizational security objectives, regulatory requirements, and risk considerations.
• Support threat detection and incident response through security monitoring, log analysis, troubleshooting, reporting, and implementation of appropriate countermeasures.
• Create technical documentation, configuration standards, implementation procedures, and operational runbooks; participate in an on-call rotation as required.

Work Location

100% Remote. EST hours.

Compensation / Benefits

• Full-Time Employment with SYSTEMTEC means competitive compensation.
• Access to health, dental, disability, and life coverage.
• 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***