Senior Security Engineer – Data Pipeline, Observability

Job not on LinkedIn

🔥 31 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Design and build telemetry pipelines that reduce SIEM costs, improve data consistency, and deliver clean data • Architect, deploy, and optimize pipelines using Cribl and comparable platforms • Onboard, parse, and normalize data from syslog, agents, cloud logs, SaaS APIs, identity, EDR, and network sources into common schemas • Build reduction, filtering, enrichment, and tiering strategies, including low-cost storage and replay capabilities • Quantify ingest business cases, model savings, and present results to technical and financial stakeholders • Brief CISO, CIO, and CFO stakeholders on findings, progress, and recommendations • Size and harden deployments across on-premises, cloud, hybrid, and regulated environments • Implement masking, redaction, role-based access control, TLS/PKI, and retention policies • Lead the data workstream of SIEM and platform migrations • Deliver pipeline health checks and optimization assessments with actionable roadmaps • Support pre-sales scoping, level-of-effort estimates, and statements of work • Collaborate with vendor engineering teams on joint delivery, escalations, and product feedback • Partner with Detection & Response and Automation & AI engineers to improve detection, automation, and AI SOC capabilities • Serve as technical point of contact with progress reporting, documentation, runbooks, and knowledge transfer • Contribute reusable intellectual property, delivery playbooks, effort baselines, and engineer mentorship

🎯 Requirements

• 5+ years in cybersecurity, IT operations, or data engineering, including 3+ years building and running production telemetry pipelines • Hands-on production experience with Cribl Stream or a comparable pipeline platform • Working knowledge of at least one SIEM or analytics destination: Splunk, Elastic, Microsoft Sentinel, Google SecOps, CrowdStrike, or SentinelOne • Client-facing delivery experience as a consultant with a services firm, VAR, systems integrator, MSSP, or vendor professional services team, or an equivalent internal role delivering to multiple business units • Linux administration and networking fundamentals, including syslog over TCP/UDP/TLS, load balancing, and firewalls • Logging services in at least one cloud: AWS, Azure, or GCP • Scripting and data skills: JavaScript, Python, or Bash; regular expressions; REST APIs; JSON, key-value, CSV, and XML formats • Ability to engage senior leadership and translate technical work into business terms • Cribl Certified User and Cribl Certified Admin (Stream), held at hire or earned within 90 days • Ability to embrace emerging technologies, including AI tools • Sedentary work and substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day • Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day • Preferred: experience at a VAR, systems integrator, or MSSP; technical writing; multiple pipeline platforms; additional certifications; Kubernetes and containers; Terraform or Ansible; Git and CI/CD; Kafka; object storage and data lakes; Snowflake or Databricks; OpenTelemetry; MITRE ATT&CK; regulated or federal environments • Ability to obtain a U.S. security clearance is a plus

🏖️ Benefits

• Remote workforce primarily (U.S. based only) • Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of the employee premium and 75% of family premiums • HSA contribution of $850 annually for employees or $1,750 annually for families • Group Dental Insurance with GuidePoint paying 100% of the employee premium and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Up to 15% travel

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume