- Develop, implement, and maintain enterprise data-processing pipelines using Cribl LogStream/Stream.
- Build and maintain Cribl pipelines, packs, routes, functions, parsers, and reusable content.
- Extract, parse, filter, mask, enrich, normalize, and transform data fields.
- Map security telemetry to OCSF or other standardized data schemas.
- Build and support integrations between Cribl and Snowflake, Databricks, AWS, SIEM platforms, security tools, observability platforms, and enterprise data lakes.
- Onboard and validate endpoint, firewall, identity, cloud, audit, application, infrastructure, and network telemetry.
- Validate transformed events for the needs of SIEM, detection engineering, threat-hunting, incident-response, and security-analytics teams.
- Troubleshoot pipeline logic, malformed events, parsing failures, schema drift, field-mapping problems, dropped data, and data-quality issues.
- Monitor pipeline performance and optimize routing, transformations, and data volumes.
- Create and maintain Snowflake databases, schemas, tables, views, streams, tasks, stored procedures, and data pipelines.
PythonJavascriptSnowflake