Security Engineer, Cribl ChronOps

Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients.  We specialize in multi-technology, complex environments with the in speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients’ cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India. About the Job: Cyderes is looking for a dedicated and creative ChronOps Engineer to join the Cyderes Engineering team. The candidate should have experience working efficiently on small teams, being flexible filling roles, and be familiar with development concepts. The primary function will be contributing directly to parser creation and updates/fixes. Candidate must also have experience in telemetry (log) monitoring and experience in investigating and researching log events through SIEMs or other related centralized logging technologies. Candidate should be detail-oriented, able to handle multiple high priority demands while driving consistent results and have a passion for delivering well-engineered and tested parsing logic. Candidate should also bring the right attitude to the team including honesty, accuracy, and positivity. We embrace the fast-paced development field and are looking for like-minded individuals that have a passion for continual improvement, new ideas, tinkering with new projects, and taking on complex problems.  Responsibilities:

Understand the nature of a log event and its relevant data points

Create parsing logic to gather and parse important information from different telemetries

Update existing parsers to meet internal and external client needs

Maintaining parser automation and associated processes

Create documentation to document parser functions and updates

Work with internal and external contacts concerning parsing requests 

Requirements:

1+ years of development / scripting experience

Experience with monitoring and investigating various telemetry (log) output

Experience on Cribl is mandatory  

Proven scripting ( PowerShell, Python, or JavaScript) or development experience (C, C++, Java etc.)

Working knowledge of LogStash and CrowdStrike is a huge plus.

Basic level understanding of development practices and languages

Basic understanding of security telemetry software / platforms (Firewalls, Endpoint Detection and Response (EDR), Operating Systems)

Operating systems logging experience (Windows and Linux)

Experience in system administration practices

Proven core competency in any of the above

Experience with documentation creation

Strong communication skills