Cribl Engineer

Booz Allen Hamilton • Colorado Springs, CO

5d • $99,000 - $225,000

About The Position

As a Cribl Engineer, you will engineer, design, develop, and implement enterprise network cyber defense capabilities to prevent sophisticated cyber threats and support secure, reliable enterprise computer systems. You will help prevent network threats, identify advanced attack vectors, and thwart exploitation methods while supporting cybersecurity missions for Booz Allen clients.

You will work independently or as part of a small integrated team and may lead a task, project, or team. You will help ensure project completion and provide guidance to lower-level technicians, specialists, and managers. The role focuses on engineering cyber defense capabilities and using data pipelines and related platforms in security operations. The posting also describes familiarity with cyber defense capabilities and practices such as security information and event management, log and network analysis, intrusion detection and prevention, web and email security, DNS security, network monitoring, proxies, firewalls, antivirus, Linux or UNIX command-line tools, and access control lists.

Requirements

• At least 3 years of experience building data pipelines using tools such as Cribl, Logstash, or Apache Kafka.
• At least 3 years of experience designing data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
• Experience deploying platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
• Experience with configuration management or DevOps tools such as Ansible, Puppet, Chef, or Terraform.
• Experience working in highly structured, controlled, classified, or compartmented environments with strict access enforcement.
• Knowledge of analyzing logs, service dependencies, and system performance anomalies.
• Knowledge of zero trust principles, DoD and IC cybersecurity frameworks, and federal compliance standards.
• Secret clearance.
• High school diploma or GED.

Nice To Haves

• At least 3 years of experience with defensive cyber operations, cybersecurity engineering, or security platform architecture.
• Experience with Kubernetes.
• Experience with SIEMs, log optimization, data normalization, and extracting telemetry data using native APIs.
• Experience with Python, Bash, or other scripting languages for automating system operations tasks.

Responsibilities

• Build data pipelines using tools such as Cribl, Logstash, or Apache Kafka.
• Design data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
• Deploy platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
• Engineer, design, develop, and implement enterprise network cyber defense capabilities.
• Lead tasks, projects, or teams; ensure project completion; and guide lower-level technicians, specialists, and managers.
• Analyze logs and service dependencies and investigate system performance anomalies.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED