Security Operations Engineer - Remote

Overview

As a remote-first company, Cribl is looking for a Security Operations Engineer to strengthen its security posture through robust operations and advanced threat detection.

In Short

• Be a pivotal member of Cribl’s Information Security team.
• Lead security incident management and investigations.
• Develop innovative solutions to remediate threats.
• Design and implement detection logic for sophisticated threats.
• Collaborate with Product Security, IT, and Legal teams.
• Work remotely from anywhere in the USA.
• Communicate effectively with technical and non-technical audiences.
• Optimize detection rules and reduce false positives.
• Conduct security assessments and vulnerability testing.
• Champion the use of Cribl products in security tech stack.

Requirements

• Experience with modern security principles and tooling.
• Proven experience in developing detection rules.
• Strong understanding of attack frameworks like MITRE ATT&CK.
• Knowledge of authentication and authorization schemes.
• Experience with scripting in Python, NodeJS, Ruby, or Bash.
• Excellent communication skills.
• Ability to work cross-functionally and handle ambiguity.

Benefits

• Competitive salary based on experience.
• Generous benefits package including health, dental, and vision.
• Paid holidays and time off.
• 401(k) and equity options.
• Eligibility for a discretionary company-wide bonus.