Cribl Engineer

Booz Allen Hamilton

. Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge .

Posted 9/30/2026full-timeUnited StatesJunior💰 $86,800 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and optimizing data pipelines using Cribl Stream and Cribl Edge, with a strong focus on log normalization, data routing, and security practices. Proficient in scripting with Python and Bash, and experienced in managing enterprise SIEM environments.

Highest-signal resume keywords

Cribl StreamData Pipeline ManagementRegex Pattern MatchingSIEM EngineeringActive TS/SCI Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data RoutingData MaskingData TransformationJavaScript ScriptingPython ScriptingBash ScriptingLinux AdministrationLog NormalizationTransport ProtocolsData Security Fundamentals

Soft Skills

Attention to DetailProblem-SolvingTeam Collaboration

Tools & Technologies

Cribl EdgeAnsibleTerraformSIEM PlatformsObservability Infrastructure

Certifications & Qualifications

DoD 8570 IAT Level III CertificationDoD 8570 CSSP-IS CertificationEnterprise SIEM Administrator Certifications

Industry Keywords

LoggingObservabilityData CollectionIngestion-Time ParsingCommon Information Model (CIM)Elastic Common Schema (ECS)Cybersecurity

Tech Stack

Tools & technologies

AnsibleCloudCyber SecurityJavaScriptLinuxPythonTerraformTypeScriptUnix

About the role

Key responsibilities & impact

Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge
Ensure efficient data routing, masking, and transformation
Normalize incoming log sources to standardized schemas such as CIM and ECS
Route normalized data to downstream SIEM platforms, analytics tools, and storage
Implement complex routing logic, data masking, enrichment, and replay workflows
Use custom JavaScript functions and Regex patterns within Cribl pipelines
Monitor system health and assist in managing worker topology
Troubleshoot bottlenecks or failures in data flow
Use Python or Bash scripting and Ansible or Terraform to automate deployment and configuration management
Maintain technical documentation, runbooks, and standard operating procedures for observability infrastructure

Requirements

What you’ll need

3+ years of experience in information technology, focusing on logging, observability, or SIEM engineering
Experience operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment
Experience administering or engineering enterprise SIEM environments
Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing
Active TS/SCI clearance; willingness to take a polygraph exam
HS diploma or GED and 7+ years of experience supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP Certification, within 75 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
Experience with Linux or Unix administration
Experience writing complex Regex for pattern matching, data extraction, and log parsing
Experience using JavaScript within Cribl's native execution environment to write custom functions, execute advanced data transformations, and manipulate JSON or event payloads inside pipelines
Knowledge of transport protocols, including HTTP, TCP, and TLS, and data formats, including JSON and Syslog
Knowledge of data security fundamentals, including encryption, RBAC, and data masking strategies
Knowledge of log normalization concepts and schema alignment, including Common Information Model (CIM) or frameworks such as ECS or OCSF
Ability to collaborate effectively in a team environment
Ability to pay strict attention to detail
Possession of excellent problem-solving skills
Enterprise SIEM Administrator or Engineering Certifications
TS/SCI clearance is required

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards for exceptional performance and superior demonstration of values