Cybersecurity Engineer

Job Description

Serve as the subject matter expert for security data platforms, ensuring reliable, scalable, and optimized data collection, transformation, and delivery across the cybersecurity ecosystem

• Administer, configure, and optimize Splunk Cloud environments, including indexes, data models, field extractions, permissions, and licensing utilization
• Manage Cribl Cloud configurations and pipelines to support secure and efficient data ingestion, transformation, routing, and reduction
• Design and implement onboarding processes for new data sources, ensuring accurate parsing, normalization, enrichment, and quality validation
• Build and maintain transformations and processing pipelines that support detection engineering, dashboards, reporting, audit, and compliance requirements
• Partner with cybersecurity stakeholders to ensure security data is complete, reliable, and aligned with operational and investigative needs
• Troubleshoot and resolve ingestion issues, data gaps, latency concerns, and pipeline failures across source systems and platform components
• Monitor platform health, performance metrics, ingest volumes, and cost trends while identifying opportunities for optimization and efficiency improvements
• Develop automation and operational tooling using Python and JavaScript, maintain platform documentation, and support upgrades, migrations, and capacity planning initiatives

Requirements

• 2-4 years of experience in cybersecurity engineering, data engineering, or platform administration with significant hands-on expertise in security data platforms
• Strong experience administering Splunk Cloud environments, including data models, field extractions, knowledge objects, indexing strategy, permissions management, and search processing
• Direct experience with Cribl Stream and Cribl Cloud for data ingestion, transformation, routing, reduction, and delivery across multiple destinations
• Deep understanding of log formats, parsing, normalization, and data enrichment practices, including experience with Common Information Model mapping
• Proficiency in Python and/or JavaScript to develop automation, integrations, operational tooling, and platform enhancements
• Experience supporting cloud-hosted environments, preferably within Amazon Web Services infrastructure
• Strong analytical and troubleshooting skills with the ability to diagnose and resolve issues across complex distributed data pipelines
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use.
• Bachelor’s degree or equivalent qualification in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field

Nice to have

• Splunk certifications such as Splunk Administrator, Splunk Architect, or related certifications are preferred

Company offers

• Medical, Personal Accident, Life Insurance and Time Off