Note: The job is a remote job and is open to candidates in USA. InterSources Inc is an IT consulting services company seeking a Data Modeling Engineer / Security Architect Consultant. The role focuses on designing, implementing, integrating, and supporting Cribl data modeling and log ingestion pipelines within an enterprise security environment, while supporting SIEM, XDR, vulnerability management, DLP, endpoint security, and security automation technologies.
Responsibilities
- Plan, design, deploy, and support Cribl data modeling and log ingestion pipelines
- Support enterprise SIEM platforms
- Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools
- Support XDR, Vulnerability Management, DLP, and Security Awareness platforms
- Collaborate with Security Architects to design enterprise security solutions
- Develop and implement countermeasures for known and emerging security threats
- Ensure consistent implementation of security controls across enterprise systems
- Support incident detection and response through monitoring, log analysis, and reporting
- Develop technical documentation, implementation guides, and SOPs
- Participate in an on-call roster
Skills
- CRIBL Data Modeling and Log Pipeline Design and Implementation
- Strong understanding of enterprise security architecture and engineering principles
- Experience implementing and supporting enterprise security tools including: + SIEM + XDR + Vulnerability Management + DLP + Endpoint Security
- Experience developing automation and integrations using scripting languages such as Python and Bash
- Knowledge of Cybersecurity Best Practices, Threat Detection, and Defensive Security Strategies
- Experience with Linux and Windows operating systems, including system hardening and security configuration
- Understanding of networking concepts, security protocols, and secure system design
- 5+ years of experience supporting large IT environments and/or system deployments
- Bachelor's Degree in an Information Technology or Information Security related field + 8+ years of relevant work experience may be substituted in lieu of education
- Hands-on CRIBL Data Modeling experience
- Hands-on SIEM administration, analysis, and reporting
- Experience building and deploying Linux-based security sensors
- Familiarity with security frameworks and compliance standards including: + NIST CSF + CJIS + IRS 1075 + CMS MARS-E
- CISSP
- Security+
Benefits
- Remote work arrangement (100% remote)
Company Overview
Company H1B Sponsorship