As a senior Cribl Engineer, you will be the architect and administrator of our data routing infrastructure. You will leverage Cribl Stream , Cribl Edge, Lake, and Cribl Search to intercept, transform, and route machine data from various sources to multiple destinations (e.g., Splunk, GoogleSecops, Crowdstrike NGS, Exabeam) You will play a critical role in reducing data noise, protecting sensitive information through masking, and optimizing our observability costs.

How you’ll make an impact

1. Architecture & Implementation
- Design and deploy scalable Cribl Worker Groups and Leader Nodes across multi-cloud and on-premise environments.
- Configure and maintain distributed deployments using Cribl Edge for fleet management.
- Integrate diverse data sources including Syslog, HTTP (HEC), Kafka, AWS S3/CloudWatch, Azure Event Hubs, and various API-based collectors.

2. Pipeline Development & Optimization
- Build processing pipelines using Regex, JavaScript, and built-in Cribl functions to parse, filter, and enrich data.
- Implement Data Reduction strategies (sampling, aggregation,



dropping null fields) to reduce SIEM/log management costs by 30% or more.
- Perform Data Masking and Obfuscation to ensure PII/PHI compliance before data reaches downstream analytics tools.
- Normalize disparate log formats into a Common Information Model (CIM) or Open Cybersecurity Schema Framework (OCSF).

3. Operations & Maintenance
- Monitor the health, performance, and throughput of the Cribl infrastructure.
- Manage version control for Cribl configurations using Git (GitOps workflow).
- Perform regular upgrades and patches of the Cribl setting.
- Troubleshoot data flow bottlenecks, broken parsers, and connectivity issues between sources and destinations.

4. Collaboration & Strategy
- Work closely with Security (SOC) and DevOps teams to ensure the right data is available in the right tool at the right time.
- Provide technical guidance on "replay" strategies, using low-cost storage (l

📌 Sr. Engineer (Bengaluru)
🏢 Optiv
📍 Bengaluru