Cribl Security Engineer-AVP

Title posted is Sr. Security Data Engineer & Developer, Security Data Platform

Job Overview:

MUFG is seeking a highly motivated Sr. Security Data Engineer and Developer as part of the Security Engineering team to design and implement cutting-edge technology to improve security posture. This is a senior role that drives engineering standards and implementation across global deployment.

Responsibilities:

• Architect, build and maintain high-volume, high-fidelity security data management using Cribl (ETL) & Snowflake (Data Lakehouse) platforms to support SIEM, SOAR, UEBA and detection engineering use cases
• Lead the ingestion, normalization, enrichment, and correlation of raw security telemetry, including logs, events, metrics, alerts, config, scanning and other data types using Cribl and Snowflake platforms. (Primary responsibility)
• Define and enforce data standards, schemas, and normalization frameworks across using data standards. (Primary responsibility)
• Various Log sources data (OCSF data format)
• Open CTI data (STIX data format)
• MUFG IAM (SCIM data format) and CMDB (Asset info) Data
• Security penetrations testing data (OWASP OPTRS data format)
• Vulnerability data, OCSF Format with CVE (Common Vulnerabilities and Exposures) format and CVSS
• Leverage SQL, Python, PowerBI to design the right solution for data analytics & reporting
• Partner with Security Operations, Threat detection, GRC and other engineering teams to translate security requirements into scalable data solutions.
• Serve as a technical authority and mentor, influencing data engineering, security analytics and platform strategy.
• Drive continuous improvement in data reliability, performance, and cost efficiency.
• Manage Data Governance with various reporting and quality checks.
• Research and look for opportunities to adopt the best practices and industry standards
• Identify opportunities to enhance the current baseline processes and configuration
• Produce engineering, integration and process related documentation.
• Manage vendor relationships to drive roadmap, solution design, implementation and troubleshooting
• Able to conduct the POC of new features to develop new solutions

Qualifications:

• At least 10+ years of experience in database engineering with significant focus on security data (logs, scanning, configuration, vulnerability, etc.), analytics, detection and platform engineering.
• 8+ years of hands-on experience with various databases (Snowflake, SQL, NoSQL)
• At least 2+ years of experience with data warehouses and data lakes
• Snowflake, Databricks, BigQuery, Redshift, Azure Synapse
• At least 1+ years of experience with reporting tools such as PowerBI, etc.
• Familiarity with SIEM products such as Splunk, Cribl, Elastic, Datadog, AWS CloudTrail, cloud watch, Azure event hub, AWS S3, etc.
• Familiarity with streaming platforms like Cribl, Kafka, Kinesis, etc.
• Solid knowledge of ETL/ELT pipelines and data ingestion processes
• Strong programming skills in Python, SQL and/or Java and JavaScript
• Experience with data modeling, data normalization and schema design
• Ability to understand, clean, and transform raw data into structure, usable formats
• Experience working with large-scale datasets (batch and streaming)
• Experience in analyzing raw data and performing data normalization.
• Implementing data validation, quality checks and error handling
• Understanding of data governance and metadata management
• Strong problem-solving and analytical skills
• Must have working knowledge of Artificial Intelligence and Machine Learning technologies.
• Anthropic, ChatGPT, Gemini, Co-Pilot, etc.
• Experience with real-time analytics
• Familiarity with BI tools (Power BI, Tableau)
• Knowledge of data privacy, compliance and security best practices
• Familiar with data standards such as OCSF, SCIM, STIX, OWASP OPTRS, etc.
• Familiar with industry security regulations and frameworks (MITRE Attack Framework, CRI, etc.)
• Experience with at least one major cloud provider
• AWS, Azure or Google

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or relevant industry certifications. Equivalent work experience is equally preferable.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Manager (CISM)
• Certified Information System Auditor (CISA)
• Certified Ethical Hacker (CEH)

Other Qualifications:

• As per MUFGs Return to Office policy, a candidate must work onsite for 4 days and 1 day remotely out of either Jersey City, NJ, Tampa, FL, or Tempe, AZ office.