Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP Certification , within 60 days of start date
Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support ( CSSP-IS ) Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification , within 30 days of start date
Ability to obtain a Cribl Certification such as Cribl Certified Observability Engineer - CCOE Certification , within 30 days of start date
Experience with Linux or Unix administration
Experience writing complex Regex for pattern matching, data extraction, and log parsing
Experience using JavaScript within Cribl's native execution environment to write custom functions, execute advanced data transformations, and manipulate JSON or event payloads inside pipelines
Knowledge of transport protocols, including HTTP, TCP, and TLS, and data formats, including JSON and Syslog
Knowledge of data security fundamentals, including encryption, RBAC, and data masking strategies
Knowledge of log normalization concepts and schema alignment, including Common Information Model ( CIM ) or frameworks such as ECS or OCSF
Enterprise SIEM Administrator or Engineering Certification s