Security Data Modeling Architect

This role will support a large enterprise security environment, working closely with security architects and engineering teams to design, implement, integrate, and continuously improve CRIBL-based data ingestion and security platforms., * Design, implement, and maintain CRIBL data models and log ingestion pipelines in large-scale security environments.

• Support the planning, design, deployment, and operational support of enterprise security platforms.
• Assist with SIEM design, implementation, monitoring, and operational support.
• Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools.
• Support XDR, vulnerability management, DLP, and security awareness platforms.
• Collaborate with security architects to design enterprise security solutions aligned with business objectives, regulatory requirements, and organizational risk considerations.
• Design and deploy security countermeasures to address known and emerging threats.
• Help ensure consistent implementation of security controls across enterprise infrastructure and applications.
• Validate security control effectiveness and recommend improvements.
• Support incident detection and response through security monitoring, log analysis, and reporting.
• Develop technical documentation, implementation guides, and standard operating procedures.
• Develop automation and integrations using scripting languages such as Python and Bash.
• Provide technical support across multiple cybersecurity initiatives as required.
• Perform other security engineering duties supporting enterprise information security operations., Work Environment
• 100% remote position.
• Candidates may be located anywhere in the United States; South Carolina residency is not required.
• Occasional onsite work may be requested based on project or operational needs. Any required travel expenses are the responsibility of the contractor.
• Participation in an on-call roster is required.

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or a related field.
• 8 years of relevant experience may substitute for the degree.
• 5+ years of experience supporting large IT environments and/or system deployments.
• Hands-on experience with CRIBL data modeling and log pipeline design/implementation.
• Strong understanding of enterprise security architecture and security engineering principles.
• Experience implementing and supporting enterprise security technologies such as:
• SIEM
• XDR
• Vulnerability Management
• DLP
• Endpoint Security
• Experience developing automation and integrations using Python and/or Bash.
• Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies.
• Experience with Linux and Windows operating systems, including system hardening and security configuration.
• Understanding of networking concepts, security protocols, and secure system design.

Preferred Qualifications

• Extensive hands-on CRIBL data modeling experience.
• Hands-on SIEM administration, analysis, and reporting.
• Experience building and deploying Linux-based security sensors.
• Familiarity with cybersecurity frameworks and compliance standards, including:
• NIST CSF
• CJIS
• IRS 1075
• CMS MARS-E
• CISSP certification.
• Security+ certification., Candidates must be willing and able to successfully complete the required screening process, which includes:
• 7-year standard background check
• Credit history check
• Motor vehicle record (MVR) check
• 10-panel drug screen
• E-Verify
• SLED check
• Annual CJIS certification after onboarding, The ideal candidate is a hands-on cybersecurity engineer with strong CRIBL expertise, capable of designing and supporting log ingestion pipelines while also contributing across enterprise security architecture, SIEM, endpoint security, Linux security, automation, and threat detection initiatives.

CRIBL data modeling and log pipeline experience is the key technical requirement for this position.