Security Architect

Security Engineer / Security Platform Administrator
Position Overview

• Preference for candidates who can occasionally work onsite in South Carolina.
• Support enterprise security platforms, security engineering initiatives, and operational security functions.
• Focus on SIEM, Cribl, security monitoring, automation, and enterprise security controls.
• Work closely with Security Architects and Information Security teams.

Primary Responsibilities

• Assist with planning, design, deployment, and operational support of:
  • Cribl data modeling and log pipeline ingestion
  • Security Information and Event Management (SIEM) platforms
  • Linux-based security sensors
  • Endpoint monitoring tools
• Support security monitoring, logging, and threat detection capabilities.
• Design and configure security infrastructure components.

Secondary Responsibilities

• Support planning, deployment, and administration of:
  • Extended Detection and Response (XDR)
  • Vulnerability Management platforms
  • Data Loss Prevention (DLP) solutions
  • Security Awareness and Training platforms

Additional Duties

• Collaborate with Security Architects to implement enterprise security solutions.
• Align security solutions with business objectives, regulatory requirements, and risk tolerance.
• Design, deploy, and manage security countermeasures.
• Support mitigation strategies for emerging cyber threats.
• Validate effectiveness of security controls and recommend improvements.
• Support incident detection and response through:
  • Monitoring
  • Log analysis
  • Security reporting
• Develop:
  • Technical documentation
  • Implementation guides
  • Standard Operating Procedures (SOPs)
• Perform additional duties supporting the Division of Information Security.

Required Skills

• Strong experience with:
  • Cribl data modeling
  • Log pipeline design and implementation
• Enterprise security architecture and engineering knowledge.
• Experience implementing and supporting:
  • SIEM platforms
  • XDR solutions
  • Vulnerability Management tools
  • DLP solutions
  • Endpoint security tools
• Automation and integration experience using:
  • Python
  • Bash
• Knowledge of:
  • Threat detection
  • Cybersecurity best practices
  • Defensive security strategies
• Linux and Windows administration experience:
  • System hardening
  • Security configuration
• Networking concepts and secure system design knowledge.

Preferred Skills

• Hands-on Cribl data modeling expertise.
• SIEM administration, analysis, and reporting experience.
• Experience building and deploying Linux-based security sensors.
• Knowledge of compliance and security frameworks:
  • NIST Cybersecurity Framework (CSF)
  • CJIS
  • IRS 1075
  • CMS MARS-E

Education & Experience

• Bachelor's Degree in:
  • Information Technology
  • Information Security
  • Related field
• Eight years of relevant experience may substitute for degree.
• Minimum five years supporting:
  • Large enterprise IT environments
  • Enterprise system deployments

Preferred Certifications

• CISSP
• CompTIA Security+

Work Environment

• Primarily remote with occasional onsite requirements in South Carolina.
• Candidate may be asked to perform local administrative tasks when needed.

Interview Process

• Initial Microsoft Teams interview (camera required).
• In-person interview preferred before final selection.
• Interviews scheduled ASAP after resume review and posting closure.