Responsibilities
• Mainly assist with planning, design, deployment, and operational support of enterprise security platforms, including:
• Cribl data modeling and log pipeline ingestion
• Security Information and Event Management (SIEM)
• Design and configuration of Linux-based security sensors and endpoint monitoring tools
• Also assist with planning, design, deployment, and operational support of:
• Extended Detection and Response (XDR)
• Vulnerability management platforms and processes
• Data Loss Prevention (DLP) solutions
• Security awareness and training platforms
• Work with security architects to design and implement enterprise security solutions that align with business goals, regulatory requirements, and organizational risk tolerance.
• Design, deploy, and manage countermeasures against known security threats, and help build mitigation strategies for emerging threats.
• Make sure security controls are applied consistently across enterprise infrastructure and applications, validate control effectiveness, and recommend improvements.
• Support incident detection and response through monitoring, log analysis, and reporting.
• Develop technical documentation, implementation guides, and SOPs as needed.
• Perform other duties as assigned in support of the Client's Information Security division.
• Participate in an on-call roster.
• Occasionally work onsite at South Carolina facilities and perform local administrative tasks as needed (preferred).
Required Skills
• Cribl data modeling and log pipeline design and implementation
• Strong understanding of enterprise security architecture and engineering principles
• Experience implementing and supporting enterprise security tools (SIEM, XDR, vulnerability management, DLP, endpoint security)
• Experience developing automation and integrations with scripting languages such as Python and Bash
• Knowledge of cybersecurity best practices, threat detection, and defensive security strategies
• Experience with Linux and Windows operating systems, including system hardening and security configuration
• Understanding of networking concepts, security protocols, and secure system design
Preferred Skills
• Hands-on Cribl data modeling experience
• Hands-on SIEM administration, analysis, and reporting experience
• Experience building and deploying Linux-based security sensors
• Familiarity with security frameworks and compliance standards such as NIST CSF, CJIS, IRS 1075, and CMS MARS-E
Education & Experience
• Bachelor's degree in Information Technology, Information Security, or a related field (eight years of relevant work experience may replace the degree)
• Five years of experience supporting large IT environments and/or system deployments
• Preferred certifications: CISSP, Security+