InterSources Inc is a Small, Woman, and Minority-Owned Business Enterprise with over 18 years of experience in IT Consulting Services. They are seeking a Data Modeling Engineer (Security Architect - Consultant) who will design, implement, and support CRIBL data modeling and log ingestion pipelines while assisting in the operational support of enterprise security platforms.
Responsibilities:
- Design, implement, and support CRIBL data modeling and log ingestion pipelines
- Assist with planning, deployment, and operational support of enterprise security platforms
- Support SIEM, XDR, Vulnerability Management, DLP, Endpoint Security, and Security Awareness initiatives
- Design and configure Linux-based security sensors and endpoint monitoring solutions
- Collaborate with Security Architects to develop enterprise security solutions aligned with business and regulatory requirements
- Implement security controls and recommend improvements across enterprise environments
- Support incident detection, investigation, monitoring, and reporting activities
- Develop technical documentation, implementation guides, and operational procedures
- Participate in an on-call support rotation
Requirements:
- Strong experience with CRIBL Data Modeling and Log Pipeline Design & Implementation
- Deep understanding of Enterprise Security Architecture and Engineering
- Experience supporting and implementing: SIEM Platforms, XDR Solutions, Vulnerability Management Tools, Data Loss Prevention (DLP), Endpoint Security Technologies
- Experience developing automation and integrations using: Python, Bash
- Knowledge of: Cybersecurity Best Practices, Threat Detection, Defensive Security Strategies
- Experience with: Linux Administration & Security Hardening, Windows Security Configuration
- Strong understanding of: Networking Concepts, Security Protocols, Secure System Design
- Bachelor's Degree in Information Technology, Information Security, or related field
- Eight (8) years of relevant experience may substitute for degree
- Minimum five (5) years supporting large enterprise IT environments and/or system deployments
- Hands-on CRIBL Data Modeling Experience
- SIEM Administration, Analysis & Reporting
- Linux-Based Security Sensor Deployment
- Experience with Security Frameworks: NIST CSF, CJIS, IRS 1075, CMS MARS-E
- CISSP Certification
- Security+ Certification