Security Architect – Data Modeling Engineer

This position will primarily focus on Cribl data modeling and log ingestion, while also providing technical support across SIEM, XDR, vulnerability management, Data Loss Prevention (DLP), endpoint security, Linux security sensors, and security automation initiatives.

Key Responsibilities

• Plan, design, deploy, maintain, and provide operational support for Cribl data modeling and enterprise log ingestion pipelines.
• Support enterprise *Security Information and Event Management (SIEM)* platforms.
• Assist with the design and configuration of Linux-based security sensors and endpoint monitoring technologies.
• Support enterprise Extended Detection and Response (XDR) platforms.
• Assist with vulnerability management technologies and processes.
• Support Data Loss Prevention (DLP) solutions.
• Assist with security awareness and training platforms.
• Collaborate with Security Architects to design and implement enterprise security solutions aligned with business objectives, regulatory requirements, and organizational risk tolerance.
• Design, deploy, and manage security countermeasures addressing known threats and contribute to mitigation strategies for emerging cybersecurity risks.
• Ensure security controls are consistently applied across enterprise infrastructure and applications.
• Validate security control effectiveness and recommend improvements.
• Support incident detection and response through security monitoring, log analysis, and reporting.
• Develop technical documentation, implementation guides, and standard operating procedures.
• Participate in an on-call support rotation.
• Perform other duties as required in support of enterprise information security operations.

Required Skills

• Strong hands-on experience with Cribl data modeling, log pipeline design, and implementation.
• Strong understanding of Enterprise security architecture and security engineering principles.
• Experience implementing and supporting enterprise security technologies, including:
• SIEM
• XDR
• Vulnerability Management
• Data Loss Prevention (DLP)
• Endpoint Security
• Experience developing security automation and integrations using scripting languages such as Python and Bash.
• Strong understanding of cybersecurity best practices, threat detection, and defensive security strategies.
• Experience with Linux and Windows operating systems, including system hardening and security configuration.
• Understanding of networking concepts, security protocols, and secure system design.

Preferred Skills

• Extensive hands-on Cribl data modeling experience.
• Hands-on SIEM administration, analysis, and reporting experience.
• Experience building and deploying Linux-based security sensors.
• Familiarity with cybersecurity frameworks and compliance standards, including:
• NIST Cybersecurity Framework (NIST CSF)
• CJIS
• IRS Publication 1075
• CMS MARS-E

Education & Experience

Candidates should meet one of the following education/experience requirements:

• -Bachelor's degree in Information Technology, Information Security, Cybersecurity, or a related field, or
• Eight years of relevant professional experience in lieu of the degree.

Candidates should also have:

• At least 5 years of experience supporting large IT environments and/or enterprise system deployments.

Preferred Certifications

• CISSP
• CompTIA Security+

Mandatory Pre-Employment Requirements

Candidates must be able to successfully complete all required pre-employment screening, including:

• Criminal background check
• Credit history check
• Motor Vehicle Record (MVR) check
• 10-panel drug screening
• E-Verify
• SLED background check

The selected candidate must also be able to obtain and maintain annual CJIS certification.

These screening requirements are mandatory.

Although the position may be performed remotely up to 100%, *preference will be given to candidates located in or near South Carolina who can occasionally report onsite when required*.

Interview Process

Initial interviews will be conducted via Microsoft Teams with camera on. An in-person interview may be preferred before final selection.

Aurthorized work statuses accepted: U.S. Citizen, Green Card holder, and H‑4 EAD

Pay: $95.00 - $100.00 per hour

Application Question(s):

• Strong hands-on experience with Cribl data modeling, log pipeline design, and implementation.

• Strong understanding of Enterprise security architecture and security engineering principles.

• Experience implementing and supporting enterprise security technologies, including: SIEM, XDR ,Vulnerability Management, Data Loss Prevention (DLP) and

Endpoint Security

• Experience developing security automation and integrations using scripting languages such as Python and Bash.
• Strong understanding of cybersecurity best practices, threat detection, and defensive security strategies.
• Experience with Linux and Windows operating systems, including system hardening and security configuration.

Understanding of networking concepts, security protocols, and secure system design.

• Are you a U.S. Citizen or Green Card holder, or H‑4 EAD? Background screening is mandate

Work Location: Hybrid remote in Columbia, SC 29201