{"id":2658095,"url":"https://alion.io/job/tsg-risk-management-senior-cribl-engineer-security-data-engineer","title":"Senior Cribl Engineer / Security Data Engineer","company":{"id":4418544,"name":"TSG Risk Management","domain":"tsgrisk.com","url":"https://alion.io/company/tsgrisk","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":132000,"max_usd":235000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Databricks","optional":false},{"name":"SIEM","optional":false},{"name":"Snowflake","optional":false},{"name":"Cortex","optional":true},{"name":"JavaScript","optional":true},{"name":"Prometheus","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-15T23:14:30Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-18T03:48:33Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Senior Cribl Engineer / Security Data Engineer\n\nLocation: Charlotte, NC preferred. Candidates in New York City, Los Angeles, Southern California, or other locations may also be considered.\nWork Model: Flexible hybrid or remote\nPosition Overview\nSeeking an experienced Senior Cribl Engineer / Security Data Engineer to develop, maintain, and optimize scalable data pipelines utilizing Cribl LogStream. The ideal candidate should have deep knowledge of Cribl architecture, extensive hands-on experience in data engineering, and the ability to improve data ingestion and processing workflows. Familiarity with security operations, SIEM platforms, the Open Cybersecurity Schema Framework (OCSF), security log data, AWS cloud services, and modern data platforms such as Snowflake and Databricks is highly desirable.\nResponsibilities\nDevelop, implement, and maintain data processing pipelines within Cribl LogStream.\nConfigure and optimize data routing, transformation, enrichment, filtering, normalization, and data quality processes.\nDevelop and support integrations between Cribl, AWS, SIEM platforms, security analytics tools, and enterprise security lake data platforms.\nBuild, troubleshoot, and optimize automated data ingestion and onboarding workflows.\nOnboard and validate security telemetry for SIEM, detection engineering, threat hunting, incident response, and security analytics use cases.\nCollaborate with Security Operations, Detection Engineering, Data Engineering, Infrastructure, and Analytics teams to deliver reliable, scalable, and high-quality data solutions.\nMonitor pipeline performance, resolve issues, and implement continuous improvements.\nDocument pipeline configurations, operational procedures, and data flows.\nDevelop, create, and maintain Snowflake database objects including databases, schemas, tables, views, streams, tasks, stored procedures, and secure data-sharing configurations.\nQualifications\n3+ years of experience with Cribl LogStream administration, configuration, and pipeline development.\n2+ years of hands-on experience with Snowflake administration, architecture, and data engineering in large-scale enterprise environments.\nExperience designing and supporting large-scale security data ingestion, transformation, and processing pipelines utilizing platforms such as Snowflake and Databricks.\nExperience with scripting languages (e.g., Python, JavaScript) for pipeline automation.\nExperience onboarding and managing enterprise security data within SIEM, security data lake, or security analytics environments.\nFamiliarity with OCSF, security data normalization, governance, compliance, and other security telemetry best practices.\nExcellent problem-solving skills, ability to debug complex pipeline issues, and strong analytical thinking\nExperience designing, creating, and managing Snowflake databases, schemas, tables, views, streams, tasks, stored procedures, and data pipelines\nExperience with Snowflake Cortex, Snowpark, Python UDFs, stored procedures, and advanced automation frameworks.","description_format":"text","description_chars":3034,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T23:41:12Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/tsg-risk-management-senior-cribl-engineer-security-data-engineer","json_url":"https://alion.io/job/tsg-risk-management-senior-cribl-engineer-security-data-engineer.json","meta":{"generated_at":"2026-10-18T04:01:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6162,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418544},"rest":"https://alion.io/mcp/rest/get_company?id=4418544"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftsg-risk-management-senior-cribl-engineer-security-data-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftsg-risk-management-senior-cribl-engineer-security-data-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftsg-risk-management-senior-cribl-engineer-security-data-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tsg-risk-management-senior-cribl-engineer-security-data-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftsg-risk-management-senior-cribl-engineer-security-data-engineer"}]}