Cribl Engineer: SIEM Data Pipeline Expert

Phase2 Technology; Riverdale Park (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to join our Visibility Analytics and Automation Team (VAAT) in the United States. You will design, build, and optimize enterprise data pipelines using Cribl Stream and Cribl Edge to feed downstream SIEM ecosystems.

You will implement routing, masking, and transformations, ensure standardized CIM/ECS schemas, and support automation with Python/Bash, Ansible, and Terraform. TS/SCI clearance is required or willingness to obtain.

Qualifications

• 3+ years of experience in Information Technology focusing on logging, observability, or SIEM engineering.
• 2+ years operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment.
• 2+ years administering or engineering enterprise SIEM environments.

Responsibilities

• Design and maintain routing, filtering, and transformation logic using Cribl Stream and Cribl Edge.
• Normalize logs to CIM/ECS schemas before routing to downstream SIEMs and analytics tools.
• Develop and optimize data pipelines, including masking, enrichment, and replay workflows.

Skills

Cribl Stream

Cribl Edge

SIEM engineering

Regex

Cribl JavaScript

Python Bash

TS/SCI clearance

Education

HS diploma or GED

Associate's degree

Bachelor's degree

Master's degree

Tools

Ansible

Terraform

Job description

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to join our Visibility Analytics and Automation Team (VAAT) in the United States. You will design, build, and optimize enterprise data pipelines using Cribl Stream and Cribl Edge to feed downstream SIEM ecosystems.

You will implement routing, masking, and transformations, ensure standardized CIM/ECS schemas, and support automation with Python/Bash, Ansible, and Terraform. TS/SCI clearance is required or willingness to obtain.