Senior Security Engineer – Data Pipeline, Observability

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and enhance telemetry pipelines utilizing Cribl and similar pipeline platforms.

• Integrate, analyze, and standardize data from various sources including syslog, agents, cloud provider logs, SaaS APIs, identity systems, EDR, and network inputs into unified schemas.

• Develop strategies for data reduction, filtering, enrichment, and tiering to direct high-value data to premium analytics platforms while maintaining full-fidelity copies in cost-effective storage solutions.

• Assess the business cases for data ingestion, model potential savings, and present comparative results to both technical and financial stakeholders.

• Update CISO, CIO, and CFO stakeholders on insights, progress, and recommendations aligned with measurable business objectives.

• Evaluate and secure deployments across on-premises, cloud, hybrid, and regulated environments, ensuring high availability, disaster recovery, queuing, backpressure, and fleet health monitoring.

• Incorporate governance into data flows through practices such as masking, redaction, role-based access control, TLS/PKI, and retention policies.

• Oversee the data workstream for SIEM and platform migrations.

• Provide pipeline health evaluations and optimization assessments accompanied by actionable roadmaps.

• Assist with pre-sales assessments, effort estimates, and statements of work.

• Collaborate with vendor partner engineering teams on project delivery, escalations, and product feedback.

• Create clean, well-structured data for detection content, automation, and AI SOC agents.

• Act as the technical point of contact, offering progress updates, documentation, runbooks, and knowledge transfer.

• Contribute reusable practice intellectual property, delivery playbooks, effort baselines, and mentor fellow engineers.

⛳️ Requirements

• Over 5 years of experience in cybersecurity, IT operations, or data engineering, including at least 3 years of experience in building and managing production telemetry pipelines.

• Practical experience with Cribl Stream or an equivalent pipeline platform.

• Familiarity with at least one SIEM or analytics destination such as Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike, or SentinelOne.

• Experience in client-facing delivery as a consultant with a services firm, VAR, systems integrator, MSSP, or vendor professional services team, or comparable internal experience serving multiple business units.

• Fundamental knowledge of Linux administration and networking, including syslog over TCP/UDP/TLS, load balancing, and firewalls.

• Experience with logging services in at least one cloud environment like AWS, Azure, or GCP.

• Proficiency in scripting and data manipulation using JavaScript, Python, or Bash; familiarity with regular expressions; experience with REST APIs; and knowledge of JSON, key-value, CSV, and XML formats.

• Capability to engage with senior leadership and translate technical concepts into business language, both in writing and verbally.

• Cribl Certified User and Cribl Certified Admin (Stream), either held at the time of hire or obtained within 90 days.

• Openness to adopting emerging technologies, including AI tools.

• Willingness to travel up to 15%.

• Ability to perform sedentary work.

• Significant movement of wrists, hands, and/or fingers for a minimum of 8 hours a day.

• Close visual acuity for computer terminal viewing and/or extensive reading for at least 8 hours daily.

• Must be authorized to work for any employer in the U.S.; employment visa sponsorship is not available.

• Preferred qualifications include: experience with VAR, systems integrator, or MSSP vendor partner programs; technical writing skills; experience with multiple pipeline platforms; additional certifications; knowledge of Kubernetes and containers; familiarity with Terraform or Ansible; experience with Git and CI/CD; understanding of Kafka; knowledge of object storage and data lakes; experience with Snowflake or Databricks; familiarity with OpenTelemetry; understanding of MITRE ATT&CK; experience in regulated or federal environments.

• The ability to obtain a U.S. security clearance is a plus.

🏝️ Benefits

• Primarily remote workforce (only U.S. based; some travel may be required for specific positions, and on-site work may be necessary for Federal positions).

• Group Medical Insurance options: Zero Deductible PPO Plan; GuidePoint covers 90% of employee premiums and 70% of family premiums.

• High Deductible Health Plan with HSA; GuidePoint pays 100% of employee premiums and 75% of family premiums.

• HSA contribution of $850 annually for employees or $1,750 annually for families.

• Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Mobile phone and home internet allowance.

• Eligibility for retirement plan after 2 months at open enrollment.

• Pet Benefit Option.