Mid-Level Cribl Engineer

Ennoble First•Reston, VA

2d•Onsite

About The Position

Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, Virginia. This hands-on engineering role focuses on the design, administration, optimization, and support of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments. The Cribl Engineer will work with technical and cybersecurity teams to manage data pipelines, integrate logging sources and destinations, optimize data routing and transformation, troubleshoot complex ingestion issues, and automate platform operations across secure enterprise environments.

Requirements

3–5 years of experience in information technology.
2–5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
2+ years of experience administering or engineering enterprise SIEM or logging environments.
Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
Experience using Regex and JavaScript for data processing and transformation.
Experience administering and troubleshooting Linux environments.
Experience with scripting and automation using Python and/or Bash.
Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
Active Cribl certification.
Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance , such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification , or within 45 days of offer acceptance if already CSSP-IS qualified. Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.

Nice To Haves

Experience supporting Intelligence Community or other classified environments.
Experience with enterprise security monitoring and observability architectures.
Experience automating Cribl deployments and configuration management.
Strong troubleshooting and analytical skills.
Strong interpersonal and customer relationship skills.
Excellent verbal and written communication skills.

Responsibilities

Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
Route, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
Develop and maintain Regex and JavaScript used for data processing and transformation.
Support Cribl deployments and operations within Linux environments.
Develop scripts and automation using Python and Bash.
Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
Monitor and optimize platform performance, reliability, scalability, and data flow.
Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
Develop and maintain technical documentation, configuration information, and operational procedures.