Security Architect (Data Modeling Engineer)

This is a remote position.

Security Architect (Data Modeling Engineer)

Project Overview

This position will serve as a Security Engineer – Cribl Data Modeling within the Department of Administration’s Division of Information Security. The successful candidate will have extensive hands-on experience designing, implementing, and maintaining data models using Cribl for log ingestion in large-scale security environments.

The contractor will work as part of a large enterprise security team and collaborate closely with full-time Security Architects and Engineering staff. The role will support the design, implementation, integration, and ongoing enhancement of Cribl data modeling and log ingestion capabilities to strengthen the organization’s security technologies and programs.

Duties/Responsibilities:

•       Preference will be given to candidates who can occasionally work onsite as needed and perform local administrative tasks within the State of South Carolina.

•       Primarily assist with the planning, design, deployment, and operational support of Cribl data modeling and log pipeline ingestion.

•       Support enterprise Security Information and Event Management (SIEM) platforms.

•       Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools.

•       Provide secondary support for Extended Detection and Response (XDR) platforms.

•       Assist with Vulnerability Management platforms and processes.

•       Support Data Loss Prevention (DLP) solutions and Security Awareness and Training platforms.

•       Collaborate with Security Architects to design and implement enterprise security solutions aligned with leadership’s business goals, regulatory requirements, and organizational risk tolerance.

•       Design, deploy, and manage security countermeasures to address known threats and contribute to mitigation strategies for emerging threats affecting enterprise data, systems, and services.

•       Ensure consistent application of security controls across enterprise infrastructure and applications, validate control effectiveness, and recommend improvements.

•       Support incident detection and response through security monitoring, log analysis, and reporting.

•       Develop and maintain technical documentation, implementation guides, and Standard Operating Procedures (SOPs).

Requirements

Education and Certifications:

•       Bachelor's degree in Information Technology, Information Security, or a related field; eight years of relevant work experience may be substituted in lieu of education.

•       Five years of experience supporting large IT environments and/or system deployments.

•       CISSP certification preferred.

•       Security+ certification preferred.

Required Skills:

•       Strong experience with Cribl data modeling, log pipeline design, and implementation.

•       Strong understanding of enterprise security architecture and engineering principles.

•       Experience implementing and supporting enterprise security tools, including SIEM, XDR, Vulnerability Management, DLP, and endpoint security.

•       Experience developing automation and integrations using Python, Bash, and other scripting languages.

•       Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies.

•       Experience with Linux and Windows operating systems, including system hardening and security configuration.

•       Strong understanding of networking concepts, security protocols, and secure system design.

Preferred Skills:

•       Hands-on experience with Cribl data modeling.

•       Hands-on experience with SIEM administration, analysis, and reporting.

•       Experience building and deploying Linux-based security sensors.

•       Familiarity with security frameworks and compliance standards, including NIST CSF, CJIS, IRS 1075, and CMS MARS-E.

Benefits