Cribl Engineer

Booz Allen Hamilton • Colorado Springs, CO

4d

About The Position

As a Splunk and Cribl Engineer, you will develop and implement enterprise network cyber defense capabilities to help protect secure and reliable computer systems from cyber threats. You will work independently or with a small integrated team, and may lead a task, project, or team. You will help ensure project completion and provide guidance to lower-level technicians, specialists, and managers. The role applies engineering expertise and familiarity with a range of cyber defense capabilities, including security information and event management tools, network monitoring and analysis, security systems, and Linux or UNIX command-line environments. The work supports Booz Allen clients and critical cybersecurity missions.

Requirements

• At least 3 years of experience building data pipelines with tools such as Cribl, Logstash, or Apache Kafka.
• At least 3 years of experience designing data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
• Experience deploying platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
• Experience with configuration management or DevOps tools such as Ansible, Puppet, Chef, or Terraform.
• Experience working in highly structured, controlled, classified, or compartmented environments with strict access enforcement.
• Knowledge of analyzing logs, service dependencies, and system performance anomalies.
• Knowledge of zero trust principles, DoD and IC cybersecurity frameworks, and federal compliance standards.
• Secret clearance required; selected applicants may be subject to a security investigation and must meet eligibility requirements for access to classified information.
• High school diploma or GED.

Nice To Haves

• At least 3 years of experience with defensive cyber operations, cybersecurity engineering, or security platform architecture.
• Experience with Kubernetes.
• Experience with SIEMs, log optimization, data normalization, and extracting telemetry data using native APIs.
• Experience with Python, Bash, or other scripting languages for automating system operations tasks.

Responsibilities

• Build data pipelines using tools such as Cribl, Logstash, or Apache Kafka.
• Design data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
• Deploy platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
• Apply engineering expertise to the design, development, direction, and implementation of enterprise network cyber defense capabilities.
• Use and configure cyber defense capabilities, including web content filters, email security, intrusion detection and prevention systems, host-based security systems, SIEM tools, DNS security practices, advanced log analysis, network monitoring, network flow and packet capture analysis, proxies, firewalls, antivirus capabilities, Linux or UNIX command line, and access control lists.
• Ensure project completion and provide guidance to lower-level technicians, specialists, and managers.
• Analyze logs and service dependencies, and investigate system performance anomalies.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED