Principal Cribl Data Engineer

Required Skills & Experience

• Expert-level hands-on Cribl engineering experience
• Proven experience building and supporting large-scale security telemetry pipelines
• Strong understanding of log ingestion, parsing, normalization, routing, and enrichment
• Experience supporting enterprise SIEM programs and security data platforms
• Ability to work independently in fast-paced, evolving environments with minimal direction
• Strong troubleshooting, critical thinking, and problem-solving skills

Nice to Have Skills & Experience

• Experience with Vector, Datadog, Splunk, Sentinel, or similar observability/SIEM platforms
• Experience supporting SOC, Threat Hunting, Detection Engineering, or Incident Response teams
• Experience onboarding and managing large volumes of diverse security data sources
• Experience building scalable ingestion architectures in greenfield or modernization initiatives

Job Description

We are seeking a highly experienced Principal Cribl Data Engineer to architect, build, and scale security telemetry pipelines supporting our telecom client’s next-generation SIEM and security analytics ecosystem. This is a specialized engineering role for professionals with deep, hands-on experience using Cribl to onboard, transform, route, enrich, and optimize security telemetry at scale. Candidates should have a proven track record building production-grade data pipelines across complex security environments and be comfortable operating with a high degree of autonomy.

The team manages more than 140 security data sources and is building the foundational ingestion and observability layer for an evolving, enterprise-scale cybersecurity platform. Engineers will play a critical role in accelerating data onboarding, improving telemetry quality, and establishing best practices for long-term scalability.