Data Modeling Engineer (Security Architect - Consultant)

The Data Modeling Engineer will serve as a Data Modeling Security Engineer focused primarily on Cribl ingestion and data modeling within the Department of Administration’s Division of Information Security.

The successful candidate will have extensive experience designing, implementing, and maintaining Cribl data models and log ingestion pipelines in large-scale enterprise security environments.

The consultant will work closely with enterprise security teams, security architects, and engineering staff to design, implement, and integrate Cribl data modeling solutions that enhance security technologies and programs.

Key Responsibilities

· Primarily support the planning, design, deployment, and operational support of enterprise security platforms, including:

o Cribl data modeling and log pipeline ingestion

o Security Information and Event Management (SIEM)

o Linux-based security sensors and endpoint monitoring tools

· Support additional enterprise security platforms, including:

o Extended Detection and Response (XDR)

o Vulnerability Management

o Data Loss Prevention (DLP)

o Security Awareness and Training platforms

· Collaborate with Security Architects to design and implement enterprise security solutions aligned with:

o Business objectives

o Regulatory requirements

o Organizational risk tolerance

· Design, deploy, and manage security countermeasures addressing known and emerging threats.

· Ensure consistent implementation of security controls across enterprise infrastructure and applications.

· Validate security control effectiveness and recommend improvements.

· Support incident detection and response through monitoring, log analysis, and reporting.

· Develop technical documentation, implementation guides, and Standard Operating Procedures (SOPs).

· Perform other duties as assigned by the Department of Administration’s Division of Information Security.

Ranked in Order of Importance:

· Cribl Data Modeling and log pipeline design/implementation

· Strong understanding of enterprise security architecture and engineering principles

· Experience implementing and supporting enterprise security tools, including:

o SIEM

o XDR

o Vulnerability Management

o DLP

o Endpoint Security

· Experience with automation and integrations using Python and Bash

· Knowledge of cybersecurity best practices, threat detection, and defensive security strategies

· Experience with Linux and Windows operating systems, including system hardening and security configuration

· Understanding of networking concepts, security protocols, and secure system design

· 5+ years of experience supporting large IT environments and/or system deployments

Preferred Skills

· Hands-on Cribl data modeling experience

· Hands-on SIEM administration, analysis, and reporting

· Experience building and deploying Linux-based security sensors

· Familiarity with security frameworks and compliance standards, including:

o NIST CSF

o CJIS

o IRS 1075

o CMS MARS-E

Mandatory Screening Requirements

· Must successfully pass a full credit check

· Must successfully pass a criminal background check

· Must obtain and maintain annual CJIS certification

· These requirements are strictly enforced and non-negotiable

Education & Experience

Required:

· Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or related field

· 8+ years of relevant work experience may substitute for the degree

· 5+ years of experience supporting large IT environments and/or system deployments

Preferred Certifications:

· CISSP

· CompTIA Security+