Designs and maintains Cribl data models and security log pipelines, routing and transforming telemetry into enterprise SIEM platforms. Supports SIEM, XDR, vulnerability management, DLP, endpoint security, Linux sensors, system hardening, threat detection, and defensive security architecture. Develops Python and Bash automation, integrations, and security controls while troubleshooting complex data issues. The role is fully remote within the United States, includes occasional South Carolina onsite work, and requires on-call participation.
This is a remote position.
The Security Data Engineer will support the South Carolina Department of Administration, Division of Technology Information Security (DIS) on its large-scale enterprise cybersecurity initiatives. The role centers on hands-on Cribl data modeling and log-pipeline design, implementation, routing, transformation, and delivery of security telemetry into enterprise SIEM environments. The Data Engineer will work alongside full-time security architects and engineers to strengthen enterprise security-data operations. Responsibilities also include hands-on security engineering across SIEM, XDR, vulnerability management, DLP, endpoint security, and Linux-based security sensors. The role requires building security automation and integrations using Python and Bash, supporting threat detection, and contributing to defensive security architecture.
Responsibilities
- Design, build, implement, and maintain Cribl data models and log pipelines.
- Develop enterprise security-data ingestion and routing workflows that deliver security telemetry into enterprise SIEM environments.
- Perform data parsing, filtering, transformation, enrichment, routing, and normalization of security telemetry.
- Support SIEM administration, analysis, and reporting.
- Implement and support enterprise security technologies, including XDR, vulnerability-management, DLP, and endpoint-security platforms.
- Build and deploy Linux-based security sensors and support Linux and Windows security configuration and hardening.
- Develop security automation and integrations using Python and Bash.
- Support threat detection, incident-detection activities, and security-control implementation and validation.
- Troubleshoot complex security-data and integration issues and support secure networking and system-design initiatives.
- Collaborate with enterprise security architects and engineers in architecture discussions and participate in the required on-call rotation.
Requirements
Minimum Qualifications - Candidates must meet all minimum qualifications
- Hands-on Cribl data modeling experience.
- Cribl log-pipeline design and implementation experience.
- Strong understanding of enterprise security architecture and engineering principles.
- Experience implementing and supporting enterprise security tools.
- Exposure to SIEM technologies.
- Exposure to XDR technologies.
- Exposure to vulnerability-management technologies.
- Exposure to Data Loss Prevention (DLP) technologies.
- Exposure to endpoint-security technologies.
- Experience developing automation and integrations using Python and/or Bash.
- Knowledge of cybersecurity best practices.
- Threat-detection experience.
- Defensive-security knowledge.
- Linux operating-system experience.
- Windows operating-system experience.
- System-hardening experience.
- Security-configuration experience.
- Understanding of networking concepts.
- Understanding of security protocols.
- Understanding of secure-system design.
- 5 years of experience supporting large IT environments and/or enterprise system deployments.
- Bachelor's degree in an Information Technology-related or Security-related field, or 8 years of relevant professional experience.
Preferred Qualifications
- Advanced Cribl Stream experience.
- SIEM administration experience.
- SIEM analysis experience.
- SIEM reporting experience.
- Experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic/Elasticsearch.
- Experience building and deploying Linux-based security sensors.
- Enterprise cybersecurity engineering experience.
- Security architecture experience.
- Security automation experience.
- Security-system integration experience.
- Knowledge of the NIST Cybersecurity Framework (NIST CSF).
- Knowledge of CJIS requirements.
- Knowledge of IRS Publication 1075.
- Knowledge of CMS MARS-E.
- CISSP certification.
- Security+ certification.
- Location in or near South Carolina with the ability to occasionally report onsite.
Additional Requirements
- Successful completion of a 7-year standard criminal background check.
- Successful completion of a full credit-history check.
- Successful completion of a driving-record (MVR) check.
- Successful completion of a 10-panel drug screen.
- E-Verify employment eligibility verification.
- Successful completion of a SLED check.
- Ability to obtain and maintain annual CJIS certification.
- Availability for occasional onsite needs in South Carolina if requested; onsite travel is the responsibility of the candidate.
- Participation in an on-call roster.
Work Location and Schedule
Location: Remote within the United States (agency located at 4430 Broad River Road, Columbia, South Carolina 29210).
Schedule: Day schedule, 40 hours per week, with on-call roster participation.
Work Arrangement: 100% remote, with occasional onsite work in South Carolina if requested.
All required experience should be clearly and explicitly documented in the resume.
Similar Jobs
13 Minutes Ago
Aerospace • Hardware • Information Technology • Security • Software • Cybersecurity • Defense
Leads supplier quality engineering for high-reliability printed wiring boards. Conducts supplier audits, capability assessments, source inspections, First Article Inspections, and process evaluations. Analyzes defects, drives root-cause corrective actions, reviews PPAP and FAI documentation, and develops supplier improvement plans using quality metrics. Requires extensive PCB/PWB manufacturing and supplier quality experience, knowledge of aerospace and defense standards, and approximately 50% travel to suppliers across the United States.
Top Skills:
ApqpAs9100As9102Asme Y15.1Black BeltControl PlansCorrective And Preventive Action (Capa)First Article Inspection (Fai)Green BeltIpc-6012Ipc-6013Ipc-6018Ipc-A-600Ipc-A-610Ipc-Tm-650Lean ManufacturingLean Six SigmaMil-Prf-31032Mil-Prf-38534Mil-Prf-55110Mil-Std-883Pcba/CcaPfmeaPpapPrinted Circuit Boards (Pcb)Printed Wiring Boards (Pwb)Product Production Line ValidationRoot Cause AnalysisSource InspectionSupplier Scorecards
Aerospace • Hardware • Information Technology • Security • Software • Cybersecurity • Defense
Leads optimization and enhancement of ServiceNow HRSD and Employee Relations capabilities. Configures Virtual Agent, workflows, scripts, portals, integrations, and Employee Center components, including PeopleSoft HCM 9.2 integrations. Gathers stakeholder requirements, oversees testing and deployments, supports production issues, and develops the HRSD roadmap. Partners with enterprise ServiceNow and IT teams on governance, security, architecture, automation, and platform standards.
Top Skills:
Application RepositoryAutomated Test FrameworkAzure DevopsBusiness RulesClient ScriptsGitGlide ScriptingJavaScriptNluPeoplesoft Hcm 9.2Performance AnalyticsPowershellRest ApisServicenow Employee CenterServicenow Employee RelationsServicenow Flow DesignerServicenow Hr Case ManagementServicenow HrsdServicenow Integration HubServicenow Knowledge ManagementServicenow Lifecycle EventsServicenow Service PortalServicenow Ui BuilderServicenow Update SetsServicenow Virtual AgentSoap ApisUi Policies
Aerospace • Hardware • Information Technology • Security • Software • Cybersecurity • Defense
Leads the configuration, optimization, integration, testing, deployment, and ongoing support of ServiceNow HRSD and Employee Relations capabilities. Develops Virtual Agent experiences, workflows, scripts, portals, Employee Center components, and PeopleSoft integrations. Partners with HR stakeholders and enterprise IT to gather requirements, follow platform governance, manage releases, troubleshoot issues, and develop the HRSD roadmap. Drives automation, process improvements, security, personalization, and enhanced employee self-service experiences.
Top Skills:
Azure DevopsBusiness RulesCi/CdClient ScriptsGitGlide ScriptingItsmJavaScriptKanbanNluPeoplesoft Hcm 9.2PowershellRest ApisScrumServicenow Automated Test FrameworkServicenow Employee Center ProServicenow Employee RelationsServicenow Flow DesignerServicenow HrsdServicenow Integration HubServicenow Performance AnalyticsServicenow Service PortalServicenow Ui BuilderServicenow Virtual AgentSoap ApisUi Policies
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
