Senior Security Engineer – Data Pipeline & Observability
New
G
GuidePoint SecurityCybersecurity
Mid-Atlantic region (Remote)Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in cybersecurity, IT operations, or data engineering, including 3+ years building and running production telemetry pipelines
- Required Skills
- AWSPythonGCPJavascriptAzureNetworking
Requirements
- Have 5+ years in cybersecurity, IT operations, or data engineering, including 3+ years building and running production telemetry pipelines.
- Have hands-on production experience with Cribl Stream or a comparable pipeline platform.
- Have working knowledge of at least one SIEM or analytics destination: Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike, or SentinelOne.
- Bring client-facing delivery experience as a consultant or an equivalent role delivering to multiple business units.
- Know Linux administration and networking fundamentals, including syslog over TCP/UDP/TLS, load balancing, and firewalls.
- Have logging-services experience in at least one cloud: AWS, Azure, or GCP.
- Use JavaScript, Python, or Bash; regular expressions; REST APIs; and JSON, key-value, CSV, and XML formats.
- Be able to explain technical work and recommendations in business terms, in writing and in person.
- Hold Cribl Certified User and Cribl Certified Admin (Stream) certifications at hire or earn them within 90 days.
- Travel up to 15%.
Responsibilities
- Architect, deploy, and optimize telemetry pipelines with Cribl products or comparable platforms.
- Onboard, parse, and normalize data from logs, SaaS APIs, identity, EDR, and network sources into common schemas.
- Build reduction, filtering, enrichment, and tiering strategies for analytics platforms and low-cost storage.
- Quantify ingest baselines and savings, and present results to technical and financial stakeholders.
- Brief client senior leadership on findings, progress, and recommendations tied to measured business goals.
- Size and harden deployments, including high availability, disaster recovery, queuing, and fleet health monitoring.
- Build data-flow governance using masking, redaction, access controls, TLS/PKI, and retention policies.
- Lead data workstreams for SIEM and platform migrations, and deliver pipeline health checks and optimization roadmaps.
- Support pre-sales scoping, effort estimates, and statements of work; coordinate with vendor partner engineering teams.
- Provide engagement reporting, as-built documentation, runbooks, and knowledge transfer; contribute reusable practice materials and mentor engineers.
View Full Description & ApplyYou'll be redirected to the employer's site
