Senior Security Engineer – Data Pipeline & Observability - Mid-Atlantic region (Remote)
GuidePoint Security2 hours ago
Responsibilities
- Architect, deploy, and optimize telemetry pipelines using Cribl and comparable pipeline platforms.
- Onboard, parse, normalize, filter, enrich, tier, and route data from security, cloud, identity, EDR, network, and SaaS sources.
- Design deployment topology, high availability, disaster recovery, queuing, backpressure, fleet health monitoring, and data governance controls.
- Lead the data workstream for SIEM and security platform migrations, health checks, optimization assessments, and actionable roadmaps.
- Quantify ingest costs and savings and present technical findings and business outcomes to technical, financial, and executive stakeholders.
- Brief CISO, CIO, and CFO stakeholders and translate recommendations into measurable business goals.
- Support pre-sales scoping, level-of-effort estimates, statements of work, partner delivery, escalations, and product feedback.
- Serve as the technical point of contact for engagements and produce progress reports, architecture documents, runbooks, as-built documentation, and knowledge transfer.
- Contribute reusable practice intellectual property and mentor other engineers.
Requirements
- At least 5 years of experience in cybersecurity, IT operations, or data engineering, including at least 3 years building and running production telemetry pipelines.
- Hands-on production experience with Cribl Stream or a comparable pipeline platform.
- Working knowledge of at least one SIEM or analytics destination, such as Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike, or SentinelOne.
- Client-facing consulting or delivery experience in a services firm, VAR, systems integrator, MSSP, vendor professional services team, or equivalent internal role.
- Linux administration, networking fundamentals, syslog over TCP/UDP/TLS, load balancing, firewalls, and logging services in AWS, Azure, or GCP.
- Scripting and data skills with JavaScript, Python, or Bash; regular expressions; REST APIs; and JSON, key-value, CSV, and XML formats.
- Ability to communicate with senior leadership and connect technical recommendations to measurable business outcomes.
- Cribl Certified User and Cribl Certified Admin (Stream) at hire or within 90 days.
- Preferred experience with VAR, systems integrator, or MSSP partner programs; multiple pipeline platforms; technical writing; and relevant platform or cloud certifications.
- Preferred experience with Kubernetes, containers, Terraform, Ansible, Git, CI/CD, Kafka, object storage, data lakes, Snowflake, Databricks, OpenTelemetry, MITRE ATT&CK data sources, regulated or federal environments, and security frameworks.
- Ability to obtain a U.S. security clearance is a plus.
Benefits
- Remote workforce primarily; U.S.-based only, with some travel and possible on-site work for certain federal positions.
- Up to 15% travel required.
- Medical insurance options with employer premium contributions and HSA contributions for eligible plans.
- Dental insurance with employer premium contributions.
- Twelve corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Tech Stack
AnsibleApache KafkaAWSAzureBashDatabricksGitGoogle Cloud PlatformJavaScriptKubernetesLinuxPythonSnowflakeSplunkTerraform
Categories
Solutions Engineering
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.