Momento USA LLC · 3 hours ago

Cribl Engineer

United States

Contract

Remote

Senior Level

7+ years exp

Maximize your interview chances

AppsConsulting

Diversity & Inclusion

H1B Sponsor Likely

Hiring Manager

John Wilson

Insider Connection @Momento USA LLC

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

A minimum of 7 years of hands-on experience in cybersecurity and big data analytics, showcasing expertise in advanced technical aspects of logging and Security Information and Event Management (SIEM) solutions.

Strong proficiency in Big Data Analytics tools such as Elastic, Cribl, Splunk, and Azure Sentinel, coupled with a deep understanding of their technical nuances and practical implementations.

Two years of Cribl specific experience with knowledge in the following areas: Stream, Data parsing and normalization, data extraction techniques to include Regex extraction functions, routes, pipelines, creating and customizing Cribl packs. Cribl certification and experience with hybrid deployments preferred.

Proven track record managing complex Enterprise Security solutions, including the deployment and management of automation technologies.

Extensive knowledge and experience with both Unix and Windows operating systems, endpoint log collection, syslog-ng and adept at utilizing command line interfaces to perform intricate tasks.

Excellent communication and engagement skills, enabling effective interaction with a diverse range of stakeholders, along with strong interpersonal and presentation abilities.

A deep-seated passion for addressing complex technical challenges, consistently striving to exceed expectations.

Experienced in the deployment of infrastructure within VMware, AWS and Azure cloud.

Successfully adapts to a dynamic, rapidly evolving environment, while also capable of working independently.

Relevant experience in IT security systems, large enterprise infrastructure management, and operations.

Proficient in gathering technical requirements and scoping, including the creation of documentation and technical drawings to ensure scope acceptance.

Experienced in SIEM best practices, particularly concerning log analysis, data onboarding, parsers, pipelines, and data lakes; familiarity with Azure Sentinel and Azure Data Explorer (ADX) is required.

Competent in creating configuration, automation, scripting languages and integration scripts using various languages, tools, and standards, including KQL, Python, PowerShell, JavaScript, YAML, REST API, Go, Bash, etc. Recent experience in developing automation scripts and CI/CD workflows.

Experienced in developing engineering (SDLC) documentation and providing coaching and mentoring to facilitate knowledge transfer to internal operations teams.

Strong problem-solving capabilities and proficient in written and verbal communication in English.

Working hours in US Eastern time zone.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityBig Data AnalyticsCriblSIEM solutionsElasticSplunkAzure SentinelData parsingUnixWindowsVMwareAWSAzure cloudIT security systemsLog analysisData onboardingDocumentationRegex extractionData extraction techniquesPipelinesCribl certificationSyslog-ngCommand line interfacesKQLPythonPowerShellJavaScriptYAMLREST APIGo

Required