Data Modeling Engineer (Security / SIEM)

sbxgplusllc; United States; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Long-term stability

Health coverage

401(k) planning

Green Card support

Job summary

IntelliBee is seeking an experienced security engineer to design, deploy and operate enterprise security platforms across our IT environment. You will lead Cribl data modeling and log pipeline ingestion, SIEM/XDR tooling, and endpoint security while aligning solutions with business goals and regulatory requirements.

The role emphasizes automation with Python/Bash, system hardening, incident detection, and creating comprehensive technical documentation to support ongoing security operations.

Qualifications

• Bachelor's degree in IT or information security field.
• Eight years of relevant work experience.
• Experience may substitute for education.
• Five years in supporting large IT environments.

Responsibilities

• Assist in planning, design, deployment and operation of enterprise security platforms.
• Cribl data modeling and log pipeline ingestion.
• SIEM, XDR, vulnerability management, DLP, and endpoint security support.
• Collaborate with security architects to align with leadership's goals and regulatory requirements.
• Develop technical documentation, implementation guides and SOPs.
• Support incident detection and response activities through monitoring and reporting.

Skills

Cribl modeling

Security architecture

Security tools experience

Automation scripting

Cybersecurity best practices

Linux/Windows admin

Networking concepts

Education

Bachelor's degree in IT or information security

Eight years of relevant work

Experience substituted for education

Five years in large IT environments

Job description

DAILY DUTIES / RESPONSIBILITIES:

PREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN OCCASIONALLY WORK ONSITE AS NEEDED AND PERFORM LOCAL ADMINISTRATIVE TASKS WITHING THE STATE OF SOUTH CAROLINA.

PRIMARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

• CRIBL DATA MODELING AND LOG PIPELINE INGESTION
• SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)
• ASSIST WITH DESIGN AND CONFIGURATION OF LINUX BASED SECURITY SENSORS AND ENDPOINT MONITORING TOOLS

SECONDARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

• EXTENDED DETECTION AND RESPONSE (XDR)
• VULNERABILITY MANAGEMENT PLATFORMS AND PROCESSES
• DATA LOSS PREVENTION (DLP) SOLUTIONS
• SECURITY AWARENESS AND TRAINING PLATFORMS
• COLLABORATE WITH SECURITY ARCHITECTS TO DESIGN AND IMPLEMENT ENTERPRISE SECURITY SOLUTIONS THAT ALIGN WITH LEADERSHIP'S BUSINESS GOALS, REGULATORY REQUIREMENTS AND ORGANIZATIONAL RISK TOLERANCE.
• DESIGN, DEPLOY AND MANAGE COUNTERMEASURES TO ADDRESS KNOWN SECURITY THREATS AND CONTRIBUTE TO MITIGATION STRATEGIES FOR EMERGING THREATS TO ENTERPRISE DATA, SYSTEMS AND SERVICES.
• ENSURE CONSISTENT APPLICATION OF SECURITY CONTROLS ACROSS ENTERPRISE INFRASTRUCTURE AND APPLICATIONS; VALIDATE CONTROL EFFECTIVENESS AND RECOMMEND IMPROVEMENTS.
• SUPPORT INCIDENT DETECTION AND RESPONSE ACTIVITIES THROUGH MONITORING, LOG ANALYSIS AND REPORTING.
• DEVELOP TECHNICAL DOCUMENTATION, IMPLEMENTATION GUIDES AND STANDARD OPERATING PROCEDURES AS NEEDED.
• PERFORM OTHER DUTIES AS ASSIGNED IN SUPPORT OF THE DEPARTMENT OF ADMINISTRATION'S DIVISION OF INFORMATION SECURITY.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• CRIBL DATA MODELING AND LOG PIPELINE DESIGN AND IMPLEMENTATION.
• Strong understanding of enterprise security architecture and engineering principles.
• Experience implementing and supporting enterprise security tools (SIEM, XDR, Vulnerability Management, DLP, endpoint security).
• Experience developing automation and integrations using scripting languages such as Python and Bash.
• Knowledge of cybersecurity best practices, threat detection, and defensive security strategies.
• Experience with Linux and Windows operating systems, including system hardening and security configuration.
• Understanding of networking concepts, security protocols, and secure system design.

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• HANDS-ON CRIBL DATA MODELING EXPERIENCE.
• Hands-on SIEM administration, analysis, and reporting experience.
• Experience building and deploying Linux-based security sensors.
• Familiarity with security frameworks and compliance standards such as NIST CSF, CJIS, IRS 1075, and CMS MARS-E.

REQUIRED EDUCATION/CERTIFICATIONS:

• BACHELOR'S DEGREE IN AN INFORMATION TECHNOLOGY OR INFORMATION SECURITY RELATED FIELD
• EIGHT YEARS OF RELEVANT WORK
• EXPERIENCE MAY BE SUBSTITUTED IN LIEU OF EDUCATION
• FIVE YEARS OF EXPERIENCE IN SUPPORTING LARGE IT ENVIRONMENTS AND/OR SYSTEM DEPLOYMENTS

PREFERRED EDUCATION/CERTIFICATIONS:

• CISSP
• Security+

Benefits at IntelliBee

• Long-Term Stability: Join us on a multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.