Cribl Engineer: Data Pipelines & SIEM Expert

Booz Allen Hamilton; United States; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines with Cribl Stream and Cribl Edge. You'll focus on routing, masking, and transforming logs for downstream SIEM ecosystems and analytics tools.

You will work on regex-driven and JavaScript-enabled Cribl pipelines, maintain data flows, and contribute to cross-functional observability efforts, with potential security clearances and DoD-related certifications.

Qualifications

• 3+ years of experience in information technology focusing on logging, observability, or SIEM engineering.
• Experience operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment.
• Experience administering or engineering enterprise SIEM environments.
• Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Ability to obtain DoD 8570 certs within specified windows.
• Ability to obtain Cribl and CSSP-IS certifications within designated timeframes.

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge to ensure efficient data routing, masking, and transformation.
• Normalize incoming log sources to CIM and ECS before routing to downstream SIEM platforms, analytics tools, and storage.
• Implement complex routing logic, data masking, enrichment, and replay workflows using JavaScript and Regex in Cribl pipelines.
• Monitor system health, manage worker topology, and troubleshoot bottlenecks or failures in the data flow.
• Utilize Python or Bash and IaC tools like Ansible or Terraform to automate deployment and configuration management.
• Maintain documentation, runbooks, and SOPs for the observability infrastructure.

Job description

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines with Cribl Stream and Cribl Edge. You'll focus on routing, masking, and transforming logs for downstream SIEM ecosystems and analytics tools.

You will work on regex-driven and JavaScript-enabled Cribl pipelines, maintain data flows, and contribute to cross-functional observability efforts, with potential security clearances and DoD-related certifications.