Principal Cribl Data Engineer

Insight Global; Bellevue (WA); On-site; USD 150,000 - 190,000; Full time

Job summary

Insight Global seeks a Principal Cribl Data Engineer to architect, build, and scale security telemetry pipelines for a next-generation SIEM and analytics ecosystem. The role demands deep Cribl expertise and autonomy in a fast-paced environment with 140+ data sources and complex security workloads.

The candidate will onboard, transform, route, enrich, and optimize telemetry at scale, supporting SOC, threat hunting, and incident response initiatives while driving best practices for scalable data

Qualifications

• Expert-level hands-on Cribl engineering experience.
• Proven experience building and supporting large-scale security telemetry pipelines.
• Strong understanding of log ingestion, parsing, normalization, routing, and enrichment.

Responsibilities

• Architect, build, and scale security telemetry pipelines for SIEM and analytics.
• Onboard and transform diverse security data sources at enterprise scale.
• Establish best practices for long-term telemetry quality and scalability.

Skills

Cribl engineering

Security telemetry pipelines

Log ingestion

SIEM platforms

Independent work

Troubleshooting

Observability platforms

Tools

Vector

Datadog

Splunk

Microsoft Sentinel

Job description

Job Description

We are seeking a highly experienced Principal Cribl Data Engineer to architect, build, and scale security telemetry pipelines supporting our telecom client’s next-generation SIEM and security analytics ecosystem. This is a specialized engineering role for professionals with deep, hands-on experience using Cribl to onboard, transform, route, enrich, and optimize security telemetry at scale. Candidates should have a proven track record building production-grade data pipelines across complex security environments and be comfortable operating with a high degree of autonomy.

The team manages more than 140 security data sources and is building the foundational ingestion and observability layer for an evolving, enterprise-scale cybersecurity platform. Engineers will play a critical role in accelerating data onboarding, improving telemetry quality, and establishing best practices for long-term scalability.

Skills and Requirements

• Expert-level hands-on Cribl engineering experience
• Proven experience building and supporting large-scale security telemetry pipelines
• Strong understanding of log ingestion, parsing, normalization, routing, and enrichment
• Experience supporting enterprise SIEM programs and security data platforms
• Ability to work independently in fast-paced, evolving environments with minimal direction
• Strong troubleshooting, critical thinking, and problem-solving skills
• Experience with Vector, Datadog, Splunk, Sentinel, or similar observability/SIEM platforms
• Experience supporting SOC, Threat Hunting, Detection Engineering, or Incident Response teams
• Experience onboarding and managing large volumes of diverse security data sources
• Experience building scalable ingestion architectures in greenfield or modernization initiatives

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].