Senior Cribl Engineer – Data Pipelines & SIEM

Disruptive Solutions, LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Disruptive Solutions, LLC in Washington, DC is seeking a SIEM/Observability Engineer to build and manage data pipelines and optimize Cribl-based logging for secure data routing. You will implement CIM/ECS schemas and automate deployments with Ansible and Terraform, while maintaining clear runbooks and documentation for observability infrastructure.

The role requires 3–5 years in IT logging/observability and DoD CSSP-IS readiness. A TS/SCI clearance with polygraph willingness is highly valued.

Qualifications

• 3–5 years of IT experience focusing on logging, observability, or SIEM engineering.
• 2–5 years building data pipelines with Cribl Stream and/or Cribl Edge in production.
• 2+ years managing enterprise SIEM environments with log forwarding and parsing.
• Education: HS diploma or GED plus relevant IT project experience, or degree variations as listed.
• Ability to obtain DoD CSSP-IS and CSSP-IS certifications within timelines.
• Active Cribl Certification is preferred.

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge.
• Normalize incoming log sources to CIM/ECS schemas before routing to SIEM and analytics tools.
• Monitor system health, manage worker topology, troubleshoot data-flow bottlenecks.
• Use Python/Bash and IaC tools (Ansible, Terraform) to automate deployment and config.
• Maintain documentation, runbooks, and SOPs for observability infrastructure.

Skills

SIEM engineering

Data pipelines

Python scripting

Ansible/T Terraform

Cribl Stream/Edge

Education

Bachelor’s degree or higher

HS diploma or GED + IT experience

Associate’s degree + IT experience

Tools

Cribl Stream

Cribl Edge

Python

Bash

Terraform

Ansible

CIM/ECS knowledge

Job description

Disruptive Solutions, LLC in Washington, DC is seeking a SIEM/Observability Engineer to build and manage data pipelines and optimize Cribl-based logging for secure data routing. You will implement CIM/ECS schemas and automate deployments with Ansible and Terraform, while maintaining clear runbooks and documentation for observability infrastructure.

The role requires 3–5 years in IT logging/observability and DoD CSSP-IS readiness. A TS/SCI clearance with polygraph willingness is highly valued.