Cribl Engineer

SYSTEMTEC is seeking a Cribl Engineer for a remoteopportunity for candidates working EST hours.Candidate will serve as a Data Modeling Security Engineer responsible for designing, implementing, and maintaining enterprise-scale Cribl data models and log ingestion pipelines. The role will also provide hands-on security engineering support across SIEM, XDR, vulnerability management, endpoint security, DLP, Linux sensors, and security automation.

Required Qualifications of the Cribl Engineer:

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• 5+ years of experience supporting large-scale IT environments, enterprise infrastructure, and/or system deployments.
• Hands-on experience with Cribl data modeling, log ingestion, pipeline development, data transformation, and routing.
• Strong understanding of enterprise security architecture, security engineering principles, and secure system design.
• Experience implementing and supporting enterprise security platforms, including SIEM, XDR, vulnerability management, DLP, and endpoint security solutions.
• Experience developing automation, integrations, and operational tooling using Python, Bash, or similar scripting languages.
• Strong knowledge of cybersecurity best practices, threat detection, incident monitoring, and defensive security strategies.
• Experience administering, hardening, and securing Linux and Windows operating systems.
• Understanding of networking fundamentals, security protocols, authentication, and secure infrastructure configurations.
• Bachelor's degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field; eight years of relevant experience may substitute for the degree. Candidates must also have at least five years of experience supporting large IT environments and/or system deployments.

Preferred Skills/Experience of the Cribl Engineer:

• Extensive hands-on experience designing and optimizing Cribl data models and production log pipelines.
• SIEM administration, security analytics, data onboarding, and reporting experience.
• Experience deploying and supporting Linux-based security sensors.
• Familiarity with NIST CSF, CJIS, IRS 1075, and CMS MARS-E requirements.
• CISSP and/or Security+ certification.

Responsibilities of the Cribl Engineer:

• Design, implement, maintain, and optimize Cribl pipelines and data models for large-scale security log ingestion and telemetry management.
• Support the planning, deployment, configuration, and operation of SIEM, XDR, vulnerability management, DLP, endpoint monitoring, and related security platforms.
• Develop security automation and integrations while assisting with Linux sensor deployment, system hardening, and security configuration.
• Work with security architecture and engineering teams to develop solutions aligned with organizational security objectives, regulatory requirements, and risk considerations.
• Support threat detection and incident response through security monitoring, log analysis, troubleshooting, reporting, and implementation of appropriate countermeasures.
• Create technical documentation, configuration standards, implementation procedures, and operational runbooks; participate in an on-call rotation as required.

Work Location: 100% Remote. EST hours.

Compensation / Benefits:
Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***