Senior Cribl Pipeline Architect for Security Data

TSG Risk Management; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Job summary

TSG Risk Management is seeking a Senior Cribl Pipeline Engineer / Security Data Engineer in Charlotte (NC) or nearby locations. The role emphasizes hands-on Cribl development to build, optimize, and maintain scalable data pipelines that feed SIEMs, data lakes, and analytics platforms.

You will map security telemetry, implement field extractions, and collaborate with Security Operations, Data Engineering, and Analytics teams to deliver reliable, high-quality data flows across Snowflake,

Qualifications

• 3+ years hands-on Cribl LogStream/Stream development experience.
• Experience mapping data and building scalable enterprise data pipelines.
• Experience onboarding data into SIEMs, data lakes, or analytics platforms.
• Strong scripting skills in Python or JavaScript.
• Snowflake administration and data-architecture experience.

Responsibilities

• Develop, implement, and maintain enterprise data-processing pipelines using Cribl LogStream/Stream.
• Build and maintain Cribl pipelines, packs, routes, functions, parsers, and reusable content.
• Perform field extraction, parsing, filtering, masking, enrichment, normalization, and transformation.
• Map security telemetry to OCSF or other standardized data schemas.
• Build and support integrations between Cribl, Snowflake, Databricks, AWS, SIEM platforms, and data lakes.
• Onboard and validate new data sources across endpoint, firewall, identity, cloud, and network telemetry.
• Validate transformed events contain required fields for SIEM, threat-hunting, and analytics teams.
• Troubleshoot pipeline issues and monitor performance; optimize data volumes.
• Document configurations, mappings, and end-to-end data flows.

Skills

Cribl LogStream/Stream development

Field extraction and parsing

Data pipeline design

Snowflake administration

Python / JavaScript scripting

Data mapping to OCSF

Troubleshooting pipelines

Cross-team collaboration

Tools

Snowflake

Databricks

AWS

Splunk

Cribl content packs

Job description

TSG Risk Management is seeking a Senior Cribl Pipeline Engineer / Security Data Engineer in Charlotte (NC) or nearby locations. The role emphasizes hands-on Cribl development to build, optimize, and maintain scalable data pipelines that feed SIEMs, data lakes, and analytics platforms.

You will map security telemetry, implement field extractions, and collaborate with Security Operations, Data Engineering, and Analytics teams to deliver reliable, high-quality data flows across Snowflake,