Skip to main content

Find Your Next IT Job

Search open jobs and apply today.

So sorry, this position is no longer available. Please go ahead and submit your application. We may have other positions that would be the perfect fit for you. Alternatively, you may want to apply to one of the following related jobs:

Security Architect - Consultant

Columbia, SC

Posted: 10/02/2026 Industry: IT Infrastructure & Operations Job Number: 8242

Job Description

Security Data Engineer – Cribl / SIEM Security Data Engineer – Cribl / SIEM
Remote – (Must reside in TX, AZ, KY, TN, GA, SC, NC, FL) | Long-Term Contract

CornerStone TTS is seeking an experienced Security Data Engineer with deep, hands-on Cribl expertise to support a large-scale enterprise cybersecurity environment.

This opportunity is designed for an engineer who has done more than simply work around Cribl. We are looking for someone who has personally designed, built, implemented, optimized, and supported Cribl data pipelines in production, particularly pipelines responsible for moving high-volume security telemetry into enterprise SIEM platforms.

You will work alongside experienced security architects and engineers to improve how security data is collected, transformed, enriched, routed, and consumed across an enterprise security ecosystem.

This role combines Cribl engineering, SIEM integration, security architecture, Linux/Windows security, automation, and security-platform engineering.
What You’ll Do Cribl & Security Data Engineering
  • Design, build, implement, and maintain Cribl Stream data pipelines supporting enterprise cybersecurity operations.
  • Develop routing, parsing, filtering, transformation, enrichment, and normalization logic for security telemetry.
  • Integrate enterprise log and security-data sources with SIEM and security analytics platforms.
  • Optimize data flows to improve visibility, performance, reliability, and security-data utilization.
  • Troubleshoot complex ingestion, routing, parsing, and data-quality issues across production pipelines.
  • Help manage high-volume security telemetry while balancing operational requirements, data usefulness, and platform efficiency.
  • Develop scalable approaches for onboarding new security-data sources.
SIEM & Security Platform Engineering
  • Support enterprise SIEM architecture, administration, integrations, analysis, and reporting.
  • Integrate security telemetry from endpoints, servers, networks, applications, cloud platforms, and security tools.
  • Support technologies across areas such as:
    • SIEM
    • XDR
    • Vulnerability management
    • Data Loss Prevention (DLP)
    • Endpoint security
    • Security monitoring and detection
  • Work with security architects to improve enterprise detection and defensive-security capabilities.
  • Assist with implementation and validation of security controls and countermeasures.
Security Automation
  • Build integrations and automation using Python and Bash.
  • Automate repetitive security-engineering and data-management activities.
  • Develop scripts and tooling to improve security-data ingestion, enrichment, validation, and operational workflows.
  • Integrate security platforms and data sources through APIs, scripts, and other automation methods.
Systems & Infrastructure Security
  • Work across Linux and Windows environments.
  • Support operating-system security configuration and system-hardening initiatives.
  • Build or support Linux-based security sensors and monitoring technologies.
  • Apply networking, security-protocol, and secure-system-design principles when troubleshooting security-data flows.
  • Support enterprise security environments spanning multiple infrastructure and security technologies.
What We’re Looking For Required Experience
You should bring:
  • Hands-on production experience with Cribl Stream.
  • Demonstrated experience designing and implementing Cribl log and security-data pipelines.
  • Experience with Cribl routing, parsing, filtering, transformation, enrichment, and data normalization.
  • Strong enterprise SIEM engineering or administration experience.
  • Experience integrating multiple security-data sources into centralized security platforms.
  • Strong understanding of enterprise security architecture and security-engineering principles.
  • Experience implementing or supporting enterprise security technologies such as:
    • SIEM
    • XDR
    • Vulnerability-management platforms
    • DLP
    • Endpoint-security technologies
  • Hands-on scripting and automation experience using Python and Bash.
  • Experience supporting both Linux and Windows environments.
  • Experience with system hardening and security configuration.
  • Strong understanding of networking concepts, security protocols, and secure-system design.
  • Knowledge of threat detection, defensive-security strategies, and cybersecurity best practices.
  • At least 5 years of experience supporting large-scale enterprise IT, cybersecurity, infrastructure, or system-deployment environments.

A bachelor's degree in information technology, cybersecurity, computer science, or a related discipline is preferred. Significant directly relevant professional experience may be considered in place of formal education.
The Candidate We Want to Talk To
The strongest candidate will be able to walk us through a real production Cribl environment and explain:
  • What data sources were feeding Cribl.
  • How pipelines were designed.
  • How routing decisions were made.
  • What parsing and transformation logic was implemented.
  • How data was enriched or normalized.
  • How security telemetry was delivered to downstream SIEM platforms.
  • How pipeline failures and data-quality problems were diagnosed.
  • How log volume and data flow were optimized.
  • How Cribl interacted with the broader enterprise security architecture.

You should be comfortable discussing what you personally built and supported, not simply describing an environment where Cribl was present.
Highly Preferred Experience
Additional experience with the following will make you especially competitive:
  • Advanced Cribl Stream administration and engineering
  • Splunk
  • Microsoft Sentinel
  • IBM QRadar
  • Elastic / Elasticsearch
  • Enterprise SIEM engineering
  • Security telemetry architecture
  • Linux-based security sensors
  • Detection engineering
  • Security automation
  • API-based security integrations
  • XDR
  • Vulnerability management
  • DLP
  • Endpoint-security platforms
  • NIST Cybersecurity Framework
  • CJIS environments
  • Regulated or compliance-driven enterprise environments

Professional certifications such as CISSP or Security+ are also valued.
Who This Role Is Not Designed For
This opportunity is unlikely to be the right match if your background is primarily:
  • SOC analysis without security engineering.
  • GRC, governance, risk, or compliance.
  • IAM-only security work.
  • General security architecture without hands-on implementation.
  • SIEM administration without Cribl experience.
  • Splunk administration with little or no data-pipeline engineering.
  • Network security without security-data engineering.
  • DevOps without meaningful cybersecurity responsibilities.
  • Observability engineering without enterprise security telemetry experience.
  • Cribl exposure without personally building or supporting Cribl pipelines.

Cribl is a core requirement for this position, not a nice-to-have.
Why CornerStone TTS
CornerStone TTS connects experienced technology professionals with meaningful opportunities across enterprise IT, cybersecurity, engineering, cloud, data, and emerging technologies.

Our recruiting team understands technical talent and works to create a straightforward candidate experience from initial conversation through placement. We focus on aligning professionals with opportunities where their experience can have meaningful impact rather than simply matching resumes to keywords.

For this search, we are specifically interested in engineers who understand the intersection of security telemetry, data engineering, SIEM architecture, automation, and enterprise cybersecurity operations.
Work Environment
  • Remote opportunity within the United States.
  • Full-time contract schedule.
  • Long-term engagement with potential for continued work.
  • Occasional participation in an on-call rotation may be required.
  • Candidates who can occasionally support onsite needs in South Carolina may receive additional consideration.

The selected professional must also be comfortable completing standard security and employment screening requirements associated with work in a sensitive enterprise environment.
Apply
If you have real hands-on Cribl Stream engineering experience and have built production security-data pipelines feeding enterprise SIEM environments, we want to hear from you.

Please send your updated resume to TTS@CornerStoneStaffing.com for consideration.

Meet Your Recruiter

John Briggs
Technical Recruiting Manager

With over 12 years in IT talent acquisition, John Briggs is a business leader specializing in workforce strategy, technical hiring, and market-driven talent solutions. As a Technical Recruiting Manager at CornerStone TTS, John has been instrumental in optimizing hiring frameworks, expanding technical talent pipelines, and driving workforce planning initiatives. His expertise spans application development, cloud computing, cybersecurity, and full-cycle IT hiring. John works closely with business leaders and technical teams to align hiring with emerging trends, leverage AI-driven recruitment technology, and refine scalable hiring strategies. Known for his ability to bridge technical expertise with organizational needs, John cultivates trusted relationships that enhance retention and drive strategic placements. His ability to integrate data-driven talent acquisition with consultative workforce solutions makes him a key driver of TTS’s success, ensuring companies secure specialized talent that aligns with long-term business objectives.

 

Apply Online

Send an email reminder to:

Share This Job:

Related Jobs:

Login to save this search and get notified of similar positions.

About Columbia, SC

Ready to take the next step in your career? Explore our job opportunities in the vibrant city of Columbia, South Carolina, where endless growth opportunities await. Known for its charming blend of southern hospitality, rich history, and bustling arts scene, Columbia offers a unique backdrop for professionals seeking to thrive in their careers. From the stunning Riverbanks Zoo and Garden to the historic South Carolina State House, this city has something for everyone. Discover a variety of cuisines, art galleries like 701 Center for Contemporary Art, catch a show at the Koger Center for the Arts, or cheer on the Gamecocks at Williams-Brice Stadium. Explore job listings in this dynamic region today and embrace the charm and opportunities Columbia has to offer!
Client Login
Employee Login