Cybersecurity Engineer (Cribl)

Who we are

NTT DATA Romania is looking for passionate Engineers for designing and improving security solutions and to offer architecture consultancy within various projects and activities.
We are seeking a highly skilled and experienced Cribl Engineer at the mid-senior level to join our dynamic team. The ideal candidate will have a strong background in data processing, log management, and observability pipelines. You will be responsible for designing, implementing, and optimizing Cribl solutions to streamline data ingestion, transformation, and routing across complex environments.

This role requires deep technical expertise in Cribl and related observability tools, along with the ability to collaborate with cross-functional teams to enhance data efficiency and visibility.
You will be a member of the Cybersecurity Competence Center, where your skills and contributions to security systems delivery will be very visible. The team is international so you will use English both written and orally, German knowledge would be an advantage.

What you’ll be doing

• Design, build, and maintain Cribl Stream and Edge pipelines to optimize data flow, filtering, transformation, and enrichment of log and metric data from various sources, including SIEM, APM, and infrastructure tools
• Integrate Cribl with platforms such as Splunk, Elastic, and Sentinel to support enterprise log management and observability objectives
• Monitor pipeline performance, troubleshooting issues, and fine-tune configurations to maintain data quality, flow integrity, and system efficiency
• Implement best practices for data reduction, parsing, and routing to control ingestion volume and manage data costs
• Develop and maintain automation scripts (Python, JavaScript, or similar) to streamline Cribl deployments, configurations, and updates, ensuring alignment with Infrastructure as Code (IaC) standards
• Apply strong troubleshooting skills to identify and resolve data processing or integration issues in real-time
• Collaborate with security, infrastructure, and operations teams to align Cribl configurations with business needs, regulatory requirements, and data governance standards
• Ensure Cribl pipelines adhere to internal security policies and industry compliance requirements, with continuous monitoring for data privacy and security
• Provide technical guidance and documentation to support teams and stakeholders, promoting best practices in log management and data processing
• Work independently or within a team to manage Cribl projects from design to deployment while staying current with Cribl platform enhancements and features

What you'll bring along

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum 1-3 years of experience working with Cribl Stream and Edge: IT and OT environments. 
• Strong expertise in Linux (Debian/Ubuntu)
• Strong expertise in data pipelines, log management, and observability platforms (e.g., Splunk, Elastic)
• Proficiency in scripting languages such as Java Script. Python, Bash, or PowerShell would be plus
• Experience with containerized environments (e.g., Docker, Kubernetes)
• Knowledge of cloud platforms (e.g., AWS, Azure, GCP) and related infrastructure
• Solid understanding of networking concepts and data routing
• English proficiency, German it would be a plus
• Preferred: Cribl Certified Engineer: Admin level
• Experience with infrastructure as code (IaC) tools (e.g. Terraform, Ansible) is a plus
• Familiarity with security frameworks and compliance requirements (e.g., SOC 2, HIPAA) is preferred as well