Mid-Level Cribl Engineer

Primary Responsibilities

• Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
• Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
• Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
• Rout, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
• Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
• Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
• Develop and maintain Regex and JavaScript used for data processing and transformation.
• Support Cribl deployments and operations within Linux environments.
• Develop scripts and automation using Python and Bash.
• Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
• Monitor and optimize platform performance, reliability, scalability, and data flow.
• Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 3–5 years of experience in information technology.
• 2–5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
• 2+ years of experience administering or engineering enterprise SIEM or logging environments.
• Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
• Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
• Experience using Regex and JavaScript for data processing and transformation.
• Experience administering and troubleshooting Linux environments.
• Experience with scripting and automation using Python and/or Bash.
• Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
• Active Cribl certification.
• Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification, or within 45 days of offer acceptance if already CSSP-IS qualified.
• Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.