Senior Cribl Engineer / Security Data Engineer

Senior Cribl Engineer / Security Data Engineer

Location

Charlotte, NC preferred. Candidates in New York City, Los Angeles, Southern California, or other locations may also be considered.

Work Model

Flexible hybrid or remote

Position Overview

Seeking an experienced Senior Cribl Engineer / Security Data Engineer to develop, maintain, and optimize scalable data pipelines utilizing Cribl LogStream. The ideal candidate should have deep knowledge of Cribl architecture, extensive hands-on experience in data engineering, and the ability to improve data ingestion and processing workflows. Familiarity with security operations, SIEM platforms, the Open Cybersecurity Schema Framework (OCSF), security log data, AWS cloud services, and modern data platforms such as Snowflake and Databricks is highly desirable.

Responsibilities

• Develop, implement, and maintain data processing pipelines within Cribl LogStream.
• Configure and optimize data routing, transformation, enrichment, filtering, normalization, and data quality processes.
• Develop and support integrations between Cribl, AWS, SIEM platforms, security analytics tools, and enterprise security lake data platforms.
• Build, troubleshoot, and optimize automated data ingestion and onboarding workflows.
• Onboard and validate security telemetry for SIEM, detection engineering, threat hunting, incident response, and security analytics use cases.
• Collaborate with Security Operations, Detection Engineering, Data Engineering, Infrastructure, and Analytics teams to deliver reliable, scalable, and high-quality data solutions.
• Monitor pipeline performance, resolve issues, and implement continuous improvements.
• Document pipeline configurations, operational procedures, and data flows.
• Develop, create, and maintain Snowflake database objects including databases, schemas, tables, views, streams, tasks, stored procedures, and secure data-sharing configurations.

Qualifications

* 3+ ye