Security Engineer – Cribl / SIEM

Hansen Talent Group is seeking a Security Engineer with extensive hands-on experience with Cribl data modeling and log ingestion pipelines. This position will support a large enterprise security environment and work closely with security architects and engineering teams to design, implement, and enhance enterprise security technologies.

The Security Engineer will primarily focus on Cribl data modeling, pipeline development, and log ingestion, while also supporting SIEM and other enterprise cybersecurity platforms. This role requires a strong combination of security engineering, architecture, automation, and hands-on technical experience.

Duties:

• Design, implement, and maintain Cribl data models and log ingestion pipelines within a large enterprise security environment.

• Configure and optimize Cribl pipelines to support security monitoring, analytics, and SIEM requirements.

• Support the design, deployment, and administration of enterprise SIEM technologies.

• Assist with the configuration and deployment of Linux-based security sensors and endpoint monitoring tools.

• Support additional security platforms including XDR, vulnerability management, DLP, and endpoint security solutions.

• Collaborate with security architects to design and implement solutions aligned with business, regulatory, and security requirements.

• Develop automation and integrations using scripting languages such as Python and Bash.

• Support incident detection and response through security monitoring, log analysis, and reporting.

• Evaluate security controls and recommend improvements to address existing and emerging threats.

• Develop technical documentation, implementation guides, and standard operating procedures.

Qualifications:

• Strong hands-on experience with Cribl data modeling, pipeline design, and log ingestion.

• Experience administering and supporting SIEM platforms in large enterprise environments.

• Strong understanding of enterprise security architecture and security engineering principles.

• Experience with enterprise security technologies including XDR, vulnerability management, DLP, and endpoint security.

• Experience developing automation and integrations using Python and/or Bash.

• Strong Linux experience, including security configuration, system hardening, and sensor deployment.

• Working knowledge of Windows environments, networking concepts, security protocols, and threat detection.

• 5+ years of experience supporting large IT environments and/or enterprise system deployments.

• Familiarity with security frameworks and standards including NIST CSF, CJIS, IRS 1075, and CMS MARS-E is preferred.

• Bachelor's degree in Information Technology, Information Security, or related field; 8 years of relevant experience may substitute for the degree.

• CISSP and/or Security+ certification preferred.