Data Engineer

About the Role

This role supports Our Client by designing and operating data‑modeling pipelines that feed security telemetry into enterprise‑wide monitoring solutions. The contractor will work remotely alongside a large security team, providing hands‑on expertise for log ingestion, analysis, and automation across multiple security domains. By delivering robust Cribl pipelines and data models, the candidate will directly enhance the organization’s ability to detect, investigate, and remediate threats. The position also includes participation in an on‑call roster, ensuring continuous coverage for critical security operations.

Key Responsibilities

• Design, develop, and maintain scalable data‑modeling pipelines using Cribl for high‑volume log ingestion.
• Integrate Cribl pipelines with SIEM, XDR, vulnerability management, DLP, and endpoint detection solutions.
• Collaborate with security architects and engineering staff to translate security requirements into effective data models.
• Provide hands‑on technical support and troubleshooting for security data flows across multiple disciplines.
• Document pipeline architectures, data schemas, and operational procedures to ensure knowledge transfer and compliance.
• Participate in an on‑call rotation, responding to incidents and performance issues in real time.
• Assist with security automation initiatives, including script development and workflow orchestration.
• Conduct performance tuning and capacity planning to sustain large‑scale security environments.

Required Skills & Experience

• 5+ years of experience designing and implementing data‑modeling solutions for security or large‑scale logging environments.
• Strong proficiency with Cribl (LogStream, LogScale) for log routing, transformation, and enrichment.
• Hands‑on experience with SIEM platforms (e.g., Splunk, QRadar) and XDR solutions.
• Solid understanding of security domains such as vulnerability management, DLP, endpoint detection, and security automation.
• Proficiency in scripting languages (Python, Bash) for pipeline automation and data manipulation.
• Experience working in Linux environments and deploying sensors or agents on servers/workstations.
• Excellent problem‑solving skills and ability to work independently in a remote setting.
• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Relevant security certifications (CISSP, CISM, or equivalent) are a plus.

Tools & Technologies

• Cribl LogStream / LogScale – primary platform for log ingestion and data modeling.
• SIEM tools (Splunk, IBM QRadar, etc.) – for security event correlation.
• XDR platforms – for extended detection and response integration.
• Vulnerability management and DLP solutions – to incorporate security data sources.
• Linux (RHEL, Ubuntu) – environment for sensor deployment and pipeline execution.
• Python, Bash – scripting for automation and data transformation.
• Git – version control for pipeline code and configuration management.

Work Schedule & Duration

• 12‑month contract with the possibility of extension.
• 100% remote work; no South Carolina residency required.
• On‑call roster participation required.
• All travel‑related costs for any onsite work are the contractor’s responsibility.

Interview Process

The interview process typically consists of 1–2 virtual interview rounds conducted via video conference with camera on.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States