Software Engineering role focused on monitoring and telemetry, specifically Splunk and Cribl configurations and data pipelines.
Compensation
base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation
Responsibilities
Administer and maintain Splunk configurations
Build and optimize SPL searches, alerts, and dashboards
Configure and manage Cribl Stream and Edge
Automate configuration deployment
Participate in incident triage
Requirements
Formal training or certification on software engineering concepts
The Senior Cyber Infrastructure & Tooling Engineer builds and maintains specialized technical environments and custom software tools that support cybersecurity operations. This role develops automated workflows, secure data pipelines, and virtualized testing environments used for incident response and threat analysis.
Responsibilities
Design and maintain multi-platform virtualized environments for testing, analysis, and security operations.
Build custom software utilities, automation scripts, and data processing tools to support rapid cyber response.
Develop secure data ingest pipelines and integrate tools across commercial, government, and custom systems.
Implement CI/CD pipelines, version control standards, and automation practices for rapid capability delivery.
Support secure posture development and ensure environments remain reliable and scalable.
Requirements
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical discipline
Nice to have: supporting SOC or tactical cybersecurity teams
Responsible for installing, configuring, and maintaining Splunk forwarders, managing Splunk Cloud and Enterprise environments, automating deployments, and ensuring platform health and security.
Responsibilities
Install, configure and maintain Splunk forwarders
Administer Splunk Cloud and Enterprise
Plan and execute change management and patching
Validate and remediate Splunk vulnerabilities
Support ITSI services and OpenTelemetry collectors
Responsible for installing, configuring, and maintaining Splunk forwarders, managing Splunk Cloud and Enterprise environments, automating deployments, and ensuring platform health and security.
Responsibilities
Install, configure and maintain Splunk forwarders
Administer Splunk Cloud app and version upgrades, certificates and RBAC
Plan and execute ACSC-approved changes with rollback plans
Cybersecurity professional responsible for administering and optimizing enterprise SIEM platforms, providing Level 3/4 support, and contributing to platform upgrades and reporting.
Responsibilities
Integrate system and application data sources into enterprise SIEM platforms
Administer and maintain SIEM platforms, including upgrades, health checks, dashboards, and reports
Provide Level 3 and Level 4 technical support and manage support cases
Support platform lifecycle upgrades and optimization initiatives
Collaborate with data onboarding teams and stakeholders for data ingestion and dashboard development
Requirements
Post-secondary education
Nice to have: Google SecOps
Nice to have: Cribl
Nice to have: banking or financial services experience
Nice to have: dashboard creation in Microsoft Sentinel or Splunk
Design, develop, and maintain out-of-the-box data connectors for CrowdStrike Next-Gen SIEM, ensuring seamless ingestion of security data from third-party products.
Compensation
The base salary range for this position for all U.S. candidates is $120,000 - $180,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package
Responsibilities
Evaluate, develop, maintain, and enhance data connectors and parsers to ingest data from third-party security products into CrowdStrike Next-Gen SIEM
Set up and maintain a lab or test environment for security products to validate data connectors and troubleshoot issues
Troubleshoot and resolve issues with existing data connectors to ensure reliable log ingestion
Collaborate with internal teams to define efficient logging, error handling, data normalization and documentation for data connectors
Research and implement best practices for ingesting security logs from Firewalls, IDS/IPS, Cloud Security products, Endpoint Security, and other security products and platforms
Requirements
Bachelor’s or Master’s degree in Computer Science or related field or equivalent work experience