> Markdown version of [/jobs/ext/3546538-security-architect-consultant-data-modeling-engineer](https://www.wearedevelopers.com/jobs/ext/3546538-security-architect-consultant-data-modeling-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect Consultant Data Modeling Engineer - **Company:** UNICOM Technologies Inc - **Location:** Columbia, SC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Bash Shell, Cyber Security, Computer Networks, Data Integration, Information Leak Prevention, Data Normalization, Linux, Elasticsearch, Data Flow Control, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Linux Security Modules, Routing, Parsing, Security Information and Event Management, Data Streaming, Systems Integration, Software Vulnerability Management, EndPointSecurity, Scripting, Computer Networking Systems, Enterprise Software Applications, Computer Network Technologies, Data Ingestion, QRadar, National Institute of Standards and Technology Cybersecurity Framework, Build Management, Information Technology, Microsoft Sentinel, Windows Security, Data Delivery, Splunk, Data Pipelines, Security Orchestration, Automation & Response - **Published:** September 30, 2026 - **Apply:** https://www.dice.com/job-detail/5b2cdb62-4e1c-404e-9c32-7de25d4e3061 ## About the Role Do not move forward with a candidate unless the required hands-on Cribl experience, enterprise security engineering experience, SIEM experience, Python/Bash scripting, operating-system security experience, rate expectations, screening requirements, education/experience requirements, work-location requirements, and required submission documents have been confirmed., * The State of South Carolina is seeking an experienced Security Architect Consultant Data Modeling Engineer with deep hands-on experience using Cribl to design, implement, and maintain enterprise security-data pipelines. * This is not a general cybersecurity architect or SIEM administrator position. * The central requirement is hands-on experience with Cribl data modeling, log-pipeline design, implementation, routing, transformation, and delivery of security telemetry into enterprise SIEM environments. * The selected consultant will work alongside full-time security architects and engineers supporting large-scale enterprise cybersecurity initiatives. * The role combines Cribl engineering with broader hands-on security engineering across SIEM, XDR, vulnerability management, DLP, endpoint security, Linux security sensors, Windows/Linux security configuration, security integrations, automation, threat detection, and defensive security architecture. * Automation is also important. Candidates should demonstrate experience building integrations and security automation using scripting languages such as Python and Bash. * The strongest candidates will have substantial experience operating within complex enterprise security environments rather than simply having exposure to Cribl or SIEM technologies. Scope of Project The selected consultant will support: Cribl data modeling Cribl Stream / log-pipeline architecture Enterprise log ingestion Security-data routing Parsing and transformation of security telemetry Data normalization and enrichment SIEM data delivery and integration SIEM administration, analysis, and reporting Enterprise security architecture Security-tool implementation and support XDR technologies Vulnerability-management platforms Data Loss Prevention / DLP Endpoint security Linux-based security sensors Windows and Linux security configuration Security-system hardening Cybersecurity automation Python scripting Bash scripting Security integrations Threat detection Defensive security strategies Networking and secure-system design Security controls and countermeasures Security-control validation, The candidate must have: Hands-on Cribl data modeling experience Cribl log-pipeline design and implementation experience Strong understanding of enterprise security architecture and engineering principles Experience implementing and supporting enterprise security tools Security-tool experience should include exposure to technologies such as: SIEM XDR Vulnerability Management Data Loss Prevention / DLP Endpoint Security The candidate must also have: Experience developing automation and integrations using Python and/or Bash Knowledge of cybersecurity best practices Threat-detection experience Defensive-security knowledge Linux operating-system experience Windows operating-system experience System-hardening experience Security-configuration experience Understanding of networking concepts Understanding of security protocols Understanding of secure-system design 5+ years of experience supporting large IT environments and/or enterprise system deployments All required experience should be clearly and explicitly documented in the resume. Do not rely solely on a skills section or broad statements such as, For Cribl specifically, the resume should demonstrate meaningful hands-on responsibility rather than simple platform exposure. Required Education The candidate should have: Bachelor's degree in an Information Technology-related field OR Bachelor's degree in a Security-related field OR 8+ years of relevant professional experience may be substituted in lieu of the degree requirement Please confirm the candidate's education and/or qualifying equivalent experience before submission. Preferred Qualifications Preferred experience includes: Hands-on Cribl data modeling experience Advanced Cribl Stream experience SIEM administration SIEM analysis SIEM reporting Building and deploying Linux-based security sensors Enterprise cybersecurity engineering Security architecture Security automation Security-system integration NIST Cybersecurity Framework / NIST CSF, The strongest candidates will demonstrate multiple preferred qualifications, but hands-on Cribl remains the most important technical signal. Additional Skills The candidate should also demonstrate: Strong enterprise security-engineering capabilities Strong troubleshooting and analytical skills Strong technical communication skills Ability to work with security architects and engineering teams Ability to design scalable security-data pipelines Ability to troubleshoot log-ingestion and routing issues Ability to automate repetitive security-engineering processes Ability to understand complex security-data flows Strong Linux skills Strong Windows-security knowledge Strong networking fundamentals Ability to work independently in a remote environment Ability to participate in an on-call environment, 5+ years of enterprise IT/security experience Real hands-on Cribl Stream experience Cribl data modeling experience Cribl pipeline-design experience Log-ingestion experience Log-routing experience Parsing and transformation experience Data normalization experience Security telemetry experience Enterprise SIEM experience SIEM administration or engineering experience Python scripting experience Bash scripting experience Linux security experience Windows security experience Security automation experience Security-tool integration experience XDR experience Vulnerability-management experience DLP experience Endpoint-security experience Networking/security-protocol knowledge Threat-detection experience Defensive-security experience Experience supporting large enterprise environments Especially strong profiles may combine Cribl with SIEM platforms such as: Splunk Microsoft Sentinel IBM QRadar Elastic / Elasticsearch Other large-scale enterprise SIEM platforms Cribl Screening Standard, Built integrations between security-data sources and SIEM platforms Troubleshot Cribl pipeline failures or data-flow issues Supported Cribl in a production enterprise environment Candidates should be able to explain their Cribl architecture, data sources, destinations, transformations, routing logic, and SIEM integrations in detail. Avoid candidates whose backgrounds are primarily focused on: General cybersecurity with no Cribl experience SIEM administration with no Cribl experience Splunk administration without Cribl pipeline engineering, Candidates without meaningful Python or Bash scripting experience Candidates without enterprise security-tool experience Candidates without Linux and Windows experience, Ability to work directly on CornerStone's W-2, when required, Ability to work remotely within the United States, Hands-on Cribl experience Cribl data modeling experience Cribl log-pipeline design experience Cribl implementation experience Enterprise SIEM experience Enterprise security architecture or engineering experience XDR experience, when applicable Vulnerability-management experience, when applicable DLP experience, when applicable Endpoint-security experience Python scripting experience Bash scripting experience Linux experience Windows experience System-hardening/security-configuration experience Networking knowledge Security-protocol knowledge Secure-system-design knowledge Threat-detection experience Defensive-security experience At least 5 years supporting large IT environments and/or enterprise system deployments Preferred experience should also be confirmed when applicable: Hands-on SIEM administration SIEM analysis SIEM reporting Linux-based security-sensor deployment ## Description Design, build, implement, and maintain Cribl data models and log pipelines Develop enterprise security-data ingestion and routing workflows Configure pipelines that deliver security telemetry into enterprise SIEM environments Perform data parsing, filtering, transformation, enrichment, routing, and normalization Work directly with enterprise security architects and engineers Support SIEM administration, analysis, and reporting Implement and support enterprise security technologies Support XDR platforms Support vulnerability-management technologies Support DLP technologies Support endpoint-security platforms Build and deploy Linux-based security sensors Support Linux and Windows security configuration and hardening Develop security automation and integrations using Python and Bash Support enterprise threat-detection capabilities Assist with defensive-security engineering Support security-control implementation and validation Participate in enterprise security architecture discussions Support incident-detection activities Troubleshoot complex security-data and integration issues Support secure networking and system-design initiatives Participate in the required on-call rotation ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Quick guide: How to write a Software Developer CV](https://www.wearedevelopers.com/magazine/37-quick-guide-how-to-write-a-software-developer-cv) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)