Cyber Security Observability Engineer (Logging & Monitoring)

As a Senior Logging and Monitoring Engineer, you will play a critical hands-on role in operating and improving Dell’s enterprise observability and security telemetry platforms. You will work deeply with Cribl, Elastic, and Corelight to build reliable data pipelines, troubleshoot complex data flow issues, and improve platform performance and resilience. This role balances execution with technical leadership, acting as a trusted contributor and mentor within the engineering team.

Responsibilities

1. Design, support, and optimize log and telemetry pipelines using Cribl, including routing logic, transformations, enrichment, and performance tuning
2. Engineer and operate Elastic environments, performing advanced troubleshooting, ingest pipeline tuning, index lifecycle management, and platform health monitoring
3. Support and enhance Corelight NDR deployments, including sensor operations, data validation, and integration with downstream analytics platforms
4. Lead troubleshooting efforts for complex logging and pipeline issues across ingestion, transport, parsing, and storage layers
5. Perform and guide platform lifecycle activities including upgrades, scaling, capacity planning, and configuration management
6. Own log onboarding efforts for new applications and infrastructure, working directly with partner teams to define requirements and validate data quality
7. Contribute to standards, onboarding patterns, and operational best practices that improve platform reliability and consistency
8. Provide operational support during incidents and maintenance windows, serving as a technical escalation point for less experienced engineers
9. Mentor mid‑level engineers and review configurations and changes to ensure quality and adherence to platform standards
   
   Essential Requirements
   
   1. 8+ years of hands-on experience operating enterprise logging, monitoring, or security telemetry platforms
   Strong hands-on experience with Cribl, including pipeline design, tuning, troubleshooting, and operational support
   Strong experience administering and engineering Elastic platforms, including ingestion architecture, performance optimization, and reliability troubleshooting
   2. Experience supporting network telemetry or NDR technologies, such as Corelight or equivalent tools
   Advanced Linux and Windows system administration skills
   3. Proficiency in Bash, Python, or similar scripting languages for automation, tooling, and operational efficiency
   4. Experience operating logging and monitoring platforms in large-scale, cloud, hybrid, or highly distributed environments
   5. Strong understanding of observability and security telemetry concepts, including data health, throughput, latency, and retention