TL;DR

SOD Associate (Cybersecurity): Key member of the Cyber Security team responsible for the integration, routing, transformation, and optimization of log data using Cribl Stream and Cribl Edge platforms with an accent on building and maintaining pipelines and implementing data shaping logic. Focus on troubleshooting ingestion issues, pipeline errors, and supporting compliance-driven retention or masking policies.

Location: Working arrangements for this role may change based on the project, business, and client requirements.

Company

%hirify_global% is one of the world's leading professional services companies, transforming clients' business, operating, and technology models for the digital era.

What you will do

Design and implement Cribl pipelines for routing, filtering, enriching, and transforming logs from diverse log sources.
Onboard new log sources from infrastructure, cloud applications, and security tooling (e.g. firewalls, proxies, EDR, cloud APIs).
Develop parsing, metadata tagging, masking, and enrichment logic to normalize log events across formats and vendors.
Manage Cribl Worker Groups, Edge Nodes, and Stream routes for scalable ingestion performance.
Maintain up-to-date documentation of data flows, onboarding configurations, and source dictionaries.
Support audits, compliance requests, and secure handling policies by applying redaction, masking, or suppression logic where needed.

Requirements

4+ years in cybersecurity, with 2+ years in security operations or detection engineering.
Strong understanding of SIEM platforms and detection engineering.
Familiarity with MITRE ATT&CK, D3FEND, Cyber Kill Chain, and threat modeling.
Scripting (Python), query languages (SPL, KQL), and automation tools.
Certifications like GCIA, GCTI, GDSA, CISSP, CEH, Security+, or MITRE ATT&CK Defender.
Hands-on experience with Cortex XSIAM for detection content development and incident lifecycle management.

Nice to have

Experience in globally distributed teams.
Strong analytical and problem-solving skills.
Ability to develop hypotheses and analyze subtle anomalies.
Effective communication and reporting skills.
Familiarity with cyber risk frameworks and flexibility for cross-timezone collaboration.

Culture & Benefits

Energetic, collaborative and inclusive workplace where everyone can thrive.
Global community with more than 300,000 associates around the world.
Foster an innovative environment where you can build the career path that’s right for you.

Sod Associate (Cybersecurity)