Cribl Engineer: Data Pipelines & SIEM (TS/SCI)

Ennoble First Inc.; Reston (VA); On-site; USD 125,000 - 155,000; Full time

Job summary

Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, VA. The role focuses on design, administration, and optimization of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments.

You will manage data pipelines, code in Python and Bash, and collaborate with cybersecurity and infrastructure teams to ensure robust data flow and platform reliability in secure environments.

Qualifications

• 3-5 years of experience in information technology.
• 2-5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
• 2+ years of experience administering or engineering enterprise SIEM or logging environments.
• Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
• Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
• Experience using Regex and JavaScript for data processing and transformation.
• Experience administering and troubleshooting Linux environments.
• Experience with scripting and automation using Python and/or Bash.
• Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
• Active Cribl certification.
• Ability to obtain CSSP-IS certification within 30 days of offer acceptance.
• Ability to obtain IAT Level III certification within 45 days of CSSP-IS certification.

Responsibilities

• Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
• Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
• Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
• Route, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
• Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
• Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
• Develop and maintain Regex and JavaScript used for data processing and transformation.
• Support Cribl deployments and operations within Linux environments.
• Develop scripts and automation using Python and Bash.
• Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
• Monitor and optimize platform performance, reliability, scalability, and data flow.
• Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Skills

Cribl Stream

Cribl Edge

Linux administration

Python

Bash

Regex

JavaScript

Terraform

Ansible

Tools

Cribl Stream

Cribl Edge

Linux

Python

Bash

Job description

Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, VA. The role focuses on design, administration, and optimization of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments.

You will manage data pipelines, code in Python and Bash, and collaborate with cybersecurity and infrastructure teams to ensure robust data flow and platform reliability in secure environments.