Security Data Engineer – Cribl

Air InfoSec

. Design, build, implement, and maintain Cribl data models and log pipelines .

Posted 9/29/2026contractColumbia • South Carolina • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cribl data modeling and log pipeline implementation, with a strong understanding of enterprise security architecture and engineering principles. Proficient in developing security automation and integrations using Python and Bash, while supporting SIEM and endpoint security technologies.

Highest-signal resume keywords

Cribl Data ModelingLog Pipeline DesignEnterprise Security ArchitectureSecurity Automation Using PythonThreat Detection Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cribl Data ModelingLog Pipeline ImplementationSecurity Telemetry ParsingLinux Security ConfigurationWindows Security HardeningAutomation DevelopmentIncident DetectionSecurity Control ImplementationSystem HardeningNetworking Concepts

Tools & Technologies

SIEMXDRData Loss Prevention (DLP)Endpoint Security PlatformsLinux-Based Security Sensors

Certifications & Qualifications

CJIS Certification7-Year Criminal Background CheckFull Credit History CheckDriving Record Check10-Panel Drug ScreenE-Verify Employment Eligibility

Industry Keywords

Cybersecurity Best PracticesDefensive SecuritySecurity ProtocolsSecure System DesignEnterprise Security Tools

Tech Stack

Tools & technologies

Cyber SecurityLinuxPython

About the role

Key responsibilities & impact

Design, build, implement, and maintain Cribl data models and log pipelines
Develop enterprise security-data ingestion and routing workflows delivering security telemetry into enterprise SIEM environments
Parse, filter, transform, enrich, route, and normalize security telemetry
Support SIEM administration, analysis, and reporting
Implement and support XDR, vulnerability-management, DLP, and endpoint-security platforms
Build and deploy Linux-based security sensors
Support Linux and Windows security configuration and hardening
Develop security automation and integrations using Python and Bash
Support threat detection and incident-detection activities
Implement and validate security controls
Troubleshoot complex security-data and integration issues
Support secure networking and system-design initiatives
Collaborate with enterprise security architects and engineers in architecture discussions
Participate in the required on-call rotation

Requirements

What you’ll need

Hands-on Cribl data modeling experience
Cribl log-pipeline design and implementation experience
Strong understanding of enterprise security architecture and engineering principles
Experience implementing and supporting enterprise security tools
Exposure to SIEM, XDR, vulnerability-management, Data Loss Prevention (DLP), and endpoint-security technologies
Experience developing automation and integrations using Python and/or Bash
Knowledge of cybersecurity best practices
Threat-detection experience
Defensive-security knowledge
Linux and Windows operating-system experience
System-hardening experience
Security-configuration experience
Understanding of networking concepts, security protocols, and secure-system design
5 years of experience supporting large IT environments and/or enterprise system deployments
Bachelor's degree in an Information Technology-related or Security-related field, or 8 years of relevant professional experience
Successful completion of a 7-year standard criminal background check
Successful completion of a full credit-history check
Successful completion of a driving-record (MVR) check
Successful completion of a 10-panel drug screen
E-Verify employment eligibility verification
Successful completion of a SLED check
Ability to obtain and maintain annual CJIS certification
Availability for occasional onsite needs in South Carolina if requested; onsite travel is the responsibility of the candidate
Participation in an on-call roster
All required experience must be clearly and explicitly documented in the resume

Benefits

Comp & perks

100% remote work arrangement with occasional onsite work in South Carolina if requested
Day schedule, 40 hours per week
Participation in an on-call roster
Opportunity to support large-scale enterprise cybersecurity initiatives for the South Carolina Department of Administration
Ability to obtain and maintain annual CJIS certification