Skip to main content
Question

Senior Cribl Engineer / Security Data Engineer

  • Oct 28, 2026 4:58 PM UTC
  • 0 replies
  • 18 views

Senior Cribl Engineer / Security Data Engineer

Location: Charlotte, NC preferred. Candidates in New York City, Los Angeles, Southern California, and other locations may also be considered.

Work Model: Flexible hybrid or remote

Position Overview

We are seeking an experienced Senior Cribl Engineer / Security Data Engineer to develop, maintain, and optimize large-scale security-data pipelines using Cribl Stream/LogStream.

The ideal candidate will have substantial hands-on experience administering Cribl, developing pipelines, onboarding security telemetry, and integrating Cribl with SIEM platforms, AWS, and enterprise security data lakes. Experience with Snowflake, Databricks, OCSF, and security-data normalization is highly desirable.

This is a senior, hands-on engineering position focused on how security data is collected, processed, enriched, routed, stored, and delivered to security analytics platforms.

Responsibilities

  • Develop, implement, administer, and maintain data-processing pipelines within Cribl Stream/LogStream.

  • Configure and optimize routing, parsing, transformation, enrichment, filtering, normalization, and data-quality processes.

  • Integrate Cribl with AWS, Splunk and other SIEM platforms, security tools, Snowflake, Databricks, and enterprise security data lakes.

  • Build, troubleshoot, and optimize automated data-ingestion and onboarding workflows.

  • Onboard and validate security telemetry for SIEM, detection engineering, threat hunting, incident response, and security analytics use cases.

  • Monitor pipeline performance, diagnose data-flow issues, and implement continuous improvements.

  • Collaborate with Security Operations, Detection Engineering, Data Engineering, Infrastructure, and Analytics teams.

  • Document pipeline configurations, operational procedures, integrations, and data flows.

  • Design, create, and maintain Snowflake databases, schemas, tables, views, streams, tasks, stored procedures, data pipelines, and secure data-sharing configurations.

Qualifications

  • At least three years of hands-on Cribl Stream/LogStream administration, configuration, and pipeline-development experience.

  • At least two years of hands-on Snowflake administration, architecture, or data-engineering experience in a large enterprise environment.

  • Experience building and supporting large-scale security-data ingestion, transformation, and processing pipelines.

  • Experience onboarding enterprise security telemetry into a SIEM, security data lake, or security analytics environment.

  • Experience integrating Cribl with Splunk or another SIEM platform, AWS, security tools, and downstream data platforms.

  • Proficiency with Python, JavaScript, or a similar scripting language for pipeline automation.

  • Strong troubleshooting, debugging, and performance-optimization skills.

  • Familiarity with OCSF, security-data normalization, governance, compliance, and telemetry-management best practices.

  • Strong communication, documentation, and cross-functional collaboration skills.

Preferred Experience

  • Snowflake Cortex

  • Snowpark

  • Python UDFs

  • Advanced Snowflake automation frameworks

  • Databricks

  • AWS security and data services

  • OCSF

  • SIEM architecture or engineering

  • Detection engineering, threat hunting, incident response, or Security Operations

Apply

Interested candidates can review the complete opportunity and apply here:

https://the-sugrue-group-llc.breezy.hr/p/8f52fc900053-senior-cribl-engineer-security-data-engineer

Terms & ConditionsAccessibility statement