Cribl Engineer

Booz Allen Hamilton•Colorado Springs, CO

4d•$99,000 - $225,000•Hybrid

About The Position

As a Splunk and Cribl Engineer, you will engineer, design, develop, and implement enterprise network cyber defense capabilities to prevent sophisticated cyber threats and support secure, reliable enterprise computer systems. You will work individually or as part of a small integrated team and may lead a task, project, or team. You will ensure project completion and guide lower-level technicians, specialists, and managers. The role applies cyber defense expertise across capabilities such as security information and event management, intrusion detection and prevention, host-based security, network monitoring and flow analysis, packet capture analysis, proxies, firewalls, antivirus, DNS security, web content filtering, email security, log analysis, Linux or UNIX command line, and access control lists. The position is hybrid in Colorado Springs, Colorado, and requires a Secret clearance.

Requirements

At least 3 years of experience building data pipelines using tools such as Cribl, Logstash, or Apache Kafka.
At least 3 years of experience designing data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
Experience deploying platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
Experience with configuration management or DevOps tools such as Ansible, Puppet, Chef, or Terraform.
Experience working in highly structured, controlled, classified, or compartmented environments with strict access enforcement.
Knowledge of log analysis, service dependencies, and system performance anomalies.
Knowledge of zero trust principles, DoD and IC cybersecurity frameworks, and federal compliance standards.
Secret clearance.
High school diploma or GED.

Nice To Haves

At least 3 years of experience in defensive cyber operations, cybersecurity engineering, or security platform architecture.
Experience with Kubernetes.
Experience with SIEMs, log optimization, data normalization, and extracting telemetry data using native APIs.
Experience with Python, Bash, or other scripting languages for automating system operations tasks.

Responsibilities

Build data pipelines using tools such as Cribl, Logstash, or Apache Kafka.
Design data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing.
Deploy platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
Apply engineering expertise to the design, development, direction, and implementation of enterprise network cyber defense capabilities.
Work individually or in a small integrated team, and lead a task, project, or team as needed.
Ensure project completion and provide guidance and direction to lower-level technicians, specialists, and managers.
Analyze logs and service dependencies and investigate system performance anomalies.