Note: The job is a remote job and is open to candidates in USA. The Department of Administration’s Division of Information Security supports enterprise information security initiatives. The Security Architect – Consultant – Data Modeling Engineer will design, implement, maintain, and optimize Cribl data models and log ingestion pipelines while providing technical support across SIEM, XDR, vulnerability management, DLP, endpoint security, security monitoring, and automation.
Responsibilities
- Design, develop, deploy, and maintain Cribl data models and log ingestion pipelines
- Plan, configure, and provide operational support for enterprise SIEM platforms
- Assist with Linux-based security sensor and endpoint monitoring deployments
- Support XDR, vulnerability management, DLP, and security awareness platforms
- Collaborate with security architects to design enterprise security solutions aligned with business, regulatory, and security requirements
- Develop and implement security controls and countermeasures to address known and emerging threats
- Validate security controls and recommend improvements
- Support incident detection and response through security monitoring, log analysis, and reporting
- Develop automation and integrations using Python, Bash, or similar scripting languages
- Work with Linux and Windows environments, including security hardening and configuration
- Create technical documentation, implementation guides, and standard operating procedures
- Provide hands-on technical support across multiple information security disciplines
- Participate in an on-call rotation
Skills
- Strong hands-on Cribl data modeling and log pipeline design/implementation experience
- Strong understanding of enterprise security architecture and engineering principles
- Experience with enterprise security tools such as: * SIEM * XDR * Vulnerability Management * DLP * Endpoint Security
- Experience developing security automation and integrations using **Python and/or Bash**
- Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies
- Experience with **Linux and Windows** operating systems, including hardening and security configuration
- Understanding of networking concepts, security protocols, and secure system design
- Bachelor's degree in Information Technology, Information Security, or a related field
- **8 years of relevant work experience may substitute for the degree.**
- Minimum **5 years of experience supporting large IT environments and/or system deployments**
- Hands-on **Cribl data modeling** experience
- SIEM administration, analysis, and reporting
- Experience deploying and supporting **Linux-based security sensors**
- Knowledge of security frameworks and compliance standards, including: + NIST CSF + CJIS + IRS 1075 + CMS MARS-E
- CISSP, Security+
Benefits
- Remote work arrangement
Company Overview
Company H1B Sponsorship