Security Architect (Data Modeling Engineer)

This is a remote position.

Security Architect (Data Modeling Engineer)

Project Overview

This position will serve as a Security Engineer Cribl Data Modeling within the Department of Administrations Division of Information Security. The successful candidate will have extensive hands-on experience designing implementing and maintaining data models using Cribl for log ingestion in large-scale security environments.

The contractor will work as part of a large enterprise security team and collaborate closely with full-time Security Architects and Engineering staff. The role will support the design implementation integration and ongoing enhancement of Cribl data modeling and log ingestion capabilities to strengthen the organizations security technologies and programs.

Duties/Responsibilities:

Preference will be given to candidates who can occasionally work onsite as needed and perform local administrative tasks within the State of South Carolina.

Primarily assist with the planning design deployment and operational support of Cribl data modeling and log pipeline ingestion.

Support enterprise Security Information and Event Management (SIEM) platforms.

Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools.

Provide secondary support for Extended Detection and Response (XDR) platforms.

Assist with Vulnerability Management platforms and processes.

Support Data Loss Prevention (DLP) solutions and Security Awareness and Training platforms.

Collaborate with Security Architects to design and implement enterprise security solutions aligned with leaderships business goals regulatory requirements and organizational risk tolerance.

Design deploy and manage security countermeasures to address known threats and contribute to mitigation strategies for emerging threats affecting enterprise data systems and services.

Ensure consistent application of security controls across enterprise infrastructure and applications validate control effectiveness and recommend improvements.

Support incident detection and response through security monitoring log analysis and reporting.

Develop and maintain technical documentation implementation guides and Standard Operating Procedures (SOPs).

Education and Certifications:

Bachelors degree in Information Technology Information Security or a related field; eight years of relevant work experience may be substituted in lieu of education.

Five years of experience supporting large IT environments and/or system deployments.

CISSP certification preferred.

Security certification preferred.

Required Skills:

Strong experience with Cribl data modeling log pipeline design and implementation.

Strong understanding of enterprise security architecture and engineering principles.

Experience implementing and supporting enterprise security tools including SIEM XDR Vulnerability Management DLP and endpoint security.

Experience developing automation and integrations using Python Bash and other scripting languages.

Strong knowledge of cybersecurity best practices threat detection and defensive security strategies.

Experience with Linux and Windows operating systems including system hardening and security configuration.

Strong understanding of networking concepts security protocols and secure system design.

Preferred Skills:

Hands-on experience with Cribl data modeling.

Hands-on experience with SIEM administration analysis and reporting.

Experience building and deploying Linux-based security sensors.

Familiarity with security frameworks and compliance standards including NIST CSF CJIS IRS 1075 and CMS MARS-E.