SCOPE: THIS POSITION WILL SERVE AS A DATA MODELING SECURITY ENGINEER FOCUSED ON

CRIBL INGESTION WITHIN THE DEPT OF ADMINISTRATION’S DIVISION OF INFORMATION

SECURITY. THE SUCCESSFUL CANDIDATE WILL SHOW EXTENSIVE EXPERIENCE

SUCCESSFULLY DESIGNING, IMPLEMENTING AND MAINTAINING DATA

MODELING USING CRIBL FOR LOG INGESTION IN LARGE SCALE SECURITY

ENVIRONMENTS. THIS CONTRACTOR WILL BE WORKING WITH A LARGE ENTERPRISE

SECURITY TEAM AND WILL ASSIST FULL-TIME SECURITY ARCHITECTS AND ENGINEERING STAFF

WITH THE DESIGN, IMPLEMENTATION AND INTEGRATION OF CRIBL DATA MODELING TO

ENHANCE TECHNOLOGIES AND PROGRAMS.

SUCCESSFUL CANDIDATE: THIS CONTRACTOR WILL BE PRIMARILY FOCUSED ON DATA

MODELING CRIBL PIPELINES WHILE PROVIDING HANDS-ON TECHNICAL SUPPORT ACROSS

MULTIPLE SECURITY DISCIPLINES, INCLUDING BUT NOT LIMITED TO SIEM, XDR,

VULNERABILITY MANAGEMENT, DATA LOSS PREVENTION (DLP), SECURITY AWARENESS,

ENDPOINT, LINUX SENSOR DEPLOYMENT, AND SECURITY AUTOMATION INITIATIVES. THE ROLE

REQUIRES EXPERIENCE IN DATA MODELING, INFORMATION SECURITY ARCHITECTURE AND

SOLUTION DESIGN TO SUPPORT THE STRATEGIC PLANNING, DESIGN, IMPLEMENTATION AND

CONTINUOUS IMPROVEMENT OF SECURE SYSTEMS AND SERVICES.

MANDATORY SCREENING REQUIREMENTS: THESE REQUIREMENTS ARE

STRICTLY ENFORCED AND NON-NEGOTIABLE. NO EXCEPTIONS CAN BE

GRANTED. CANDIDATES WHO CANNOT PASS THESE REQUIREMENTS WILL NOT

BE ELIGIBLE FOR HIRE. ALL APPLICANTS MUST SUCCESSFULLY PASS A FULL

CREDIT CHECK AND CRIMINAL BACKGROUND CHECK DURING THE INITIAL

HIRING PROCESS. ONCE ONBOARD, THEY MUST OBTAIN AND RETAIN ANNUAL

CJIS CERTIFICATION AS PART OF THE ONGOING EMPLOYMENT PROCESS.

OTHER: THIS POSITION WILL PARTICIPATE IN AN ON-CALL ROSTER. PREFERENCE GIVEN TO

LOCAL CANDIDATES WHO CAN PHYSICALLY COME ONSITE TO SC FACILITIES WHEN NEEDED.

POSITION TITLE: SECURITY ARCHITECT – CONSULTANT – DATA MODELING ENGINEER

EST. START DATE:

07/13/2026

EST. DURATION:

12 MONTHS

POSSIBILITY OF EXTENSION?

YES

MAX BILL RATE: $125.00

ESTIMATED BUDGET:

PUBLIC SECTOR/GOV’T

EXPERIENCE REQUIRED?

REMOTE WORK

POSSIBILITY YES OR NO?

YES: UP TO 100%

PRE-EMPLOYMENT CHECKS: MANDATORY SCREENING REQUIREMENTS: THESE

REQUIREMENTS ARE STRICTLY ENFORCED AND NON-NEGOTIABLE. NO

EXCEPTIONS CAN BE GRANTED. CANDIDATES WHO CANNOT PASS THESE

REQUIREMENTS WILL NOT BE ELIGIBLE FOR HIRE. ALL APPLICANTS MUST

SUCCESSFULLY PASS A FULL CREDIT CHECK AND CRIMINAL BACKGROUND

CHECK DURING THE INITIAL HIRING PROCESS. ONCE ONBOARD, THEY

MUST OBTAIN AND RETAIN ANNUAL CJIS CERTIFICATION AS PART OF THE

ONGOING EMPLOYMENT PROCESS.

• 7 YEAR STANDARD BACKGROUND CHECK & CREDIT HISTORY CHECK

• DRIVING RECORD (MVR)

• 10-PANEL DRUG SCREEN

• E-VERIFY

• SLED CHECK

DAILY DUTIES / RESPONSIBILITIES:

PREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN OCCASIONALLY

WORK ONSITE AS NEEDED AND PERFORM LOCAL ADMINISTRATIVE TASKS

WITHING THE STATE OF SOUTH CAROLINA.

• PRIMARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL

SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

CRIBL DATA MODELING AND LOG PIPELINE INGESTION

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

ASSIST WITH DESIGN AND CONFIGURATION OF LINUX BASED

SECURITY SENSORS AND ENDPOINT MONITORING TOOLS

• SECONDARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL

SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

EXTENDED DETECTION AND RESPONSE (XDR)

VULNERABILITY MANAGEMENT PLATFORMS AND PROCESSES

DATA LOSS PREVENTION (DLP) SOLUTIONS

SECURITY AWARENESS AND TRAINING PLATFORMS

• COLLABORATE WITH SECURITY ARCHITECTS TO DESIGN AND IMPLEMENT ENTERPRISE

SECURITY SOLUTIONS THAT ALIGN WITH LEADERSHIP’S BUSINESS GOALS,

REGULATORY REQUIREMENTS AND ORGANIZATIONAL RISK TOLERANCE.

• DESIGN, DEPLOY AND MANAGE COUNTERMEASURES TO ADDRESS KNOWN SECURITY

THREATS AND CONTRIBUTE TO MITIGATION STRATEGIES FOR EMERGING THREATS TO

ENTERPRISE DATA, SYSTEMS AND SERVICES.

• ENSURE CONSISTENT APPLICATION OF SECURITY CONTROLS ACROSS ENTERPRISE

INFRASTRUCTURE AND APPLICATIONS; VALIDATE CONTROL EFFECTIVENESS AND

RECOMMEND IMPROVEMENTS.

• SUPPORT INCIDENT DETECTION AND RESPONSE ACTIVITIES THROUGH MONITORING,

LOG ANALYSIS AND REPORTING.

• DEVELOP TECHNICAL DOCUMENTATION, IMPLEMENTATION GUIDES AND STANDARD

OPERATING PROCEDURES AS NEEDED.

• PERFORM OTHER DUTIES AS ASSIGNED IN SUPPORT OF THE DEPARTMENT OF

ADMINISTRATION’S DIVISION OF INFORMATION SECURITY.

REQUIRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

• CRIBL DATA MODELING AND

LOG PIPELINE DESIGN AND

IMPLEMENTATION.

• Strong understanding of enterprise

security architecture and engineering

principles.

• Experience implementing and

supporting enterprise security tools

(SIEM, XDR, Vulnerability

Management, DLP, endpoint

security).

• Experience developing automation

and integrations using scripting

languages such as Python and Bash.

• Knowledge of cybersecurity best

practices, threat detection, and

defensive security strategies.

• Experience with Linux and Windows

operating systems, including system

hardening and security configuration.

• Understanding of networking

concepts, security protocols, and

secure system design.

PREFERRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

• HANDS-ON CRIBL DATA

MODELING EXPERIENCE.

• Hands-on SIEM administration,

analysis, and reporting experience.

• Experience building and deploying

Linux-based security sensors.

• Familiarity with security frameworks

and compliance standards such as

NIST CSF, CJIS, IRS 1075, and

CMS MARS-E.

REQUIRED EDUCATION/CERTIFICATIONS:

• BACHELOR'S DEGREE IN AN

INFORMATION TECHNOLOGY OR

INFORMATION SECURITY RELATED

FIELD

• EIGHT YEARS OF RELEVANT WORK

EXPERIENCE MAY BE SUBSTITUTED IN

LIEU OF EDUCATION

• FIVE YEARS OF EXPERIENCE IN

SUPPORTING LARGE IT

ENVIRONMENTS AND/OR SYSTEM

DEPLOYMENTS

PREFERRED EDUCATION/CERTIFICATIONS:

• CISSP

• Security+

INTERVIEW PROCESS (phone, video or in-

person, how many rounds of i/v’s, etc)?

INITIAL ROUND OF INTERVIEWS ON

MICROSOFT TEAMS (ON CAMERA)

WITH IN-PERSON INTERVIEWS

INTERVIEW AVAILABILITY: How soon can

you schedule an interview (date / times)?

ASAP after posting closes and resumes are

received and reviewed

Requirements

SCOPE: THIS POSITION WILL SERVE AS A DATA MODELING SECURITY ENGINEER FOCUSED ON CRIBL INGESTION WITHIN THE DEPT OF ADMINISTRATION’S DIVISION OF INFORMATION SECURITY. THE SUCCESSFUL CANDIDATE WILL SHOW EXTENSIVE EXPERIENCE SUCCESSFULLY DESIGNING, IMPLEMENTING AND MAINTAINING DATA MODELING USING CRIBL FOR LOG INGESTION IN LARGE SCALE SECURITY ENVIRONMENTS. THIS CONTRACTOR WILL BE WORKING WITH A LARGE ENTERPRISE SECURITY TEAM AND WILL ASSIST FULL-TIME SECURITY ARCHITECTS AND ENGINEERING STAFF WITH THE DESIGN, IMPLEMENTATION AND INTEGRATION OF CRIBL DATA MODELING TO ENHANCE TECHNOLOGIES AND PROGRAMS.

SUCCESSFUL CANDIDATE: THIS CONTRACTOR WILL BE PRIMARILY FOCUSED ON DATA MODELING CRIBL PIPELINES WHILE PROVIDING HANDS-ON TECHNICAL SUPPORT ACROSS MULTIPLE SECURITY DISCIPLINES, INCLUDING BUT NOT LIMITED TO SIEM, XDR, VULNERABILITY MANAGEMENT, DATA LOSS PREVENTION (DLP), SECURITY AWARENESS, ENDPOINT, LINUX SENSOR DEPLOYMENT, AND SECURITY AUTOMATION INITIATIVES. THE ROLE REQUIRES EXPERIENCE IN DATA MODELING, INFORMATION SECURITY ARCHITECTURE AND SOLUTION DESIGN TO SUPPORT THE STRATEGIC PLANNING, DESIGN, IMPLEMENTATION AND CONTINUOUS IMPROVEMENT OF SECURE SYSTEMS AND SERVICES.

MANDATORY SCREENING REQUIREMENTS: THESE REQUIREMENTS ARE STRICTLY ENFORCED AND NON-NEGOTIABLE. NO EXCEPTIONS CAN BE GRANTED. CANDIDATES WHO CANNOT PASS THESE REQUIREMENTS WILL NOT BE ELIGIBLE FOR HIRE. ALL APPLICANTS MUST SUCCESSFULLY PASS A FULL CREDIT CHECK AND CRIMINAL BACKGROUND CHECK DURING THE INITIAL HIRING PROCESS. ONCE ONBOARD, THEY MUST OBTAIN AND RETAIN ANNUAL CJIS CERTIFICATION AS PART OF THE ONGOING EMPLOYMENT PROCESS

DAILY DUTIES / RESPONSIBILITIES:

PREFERENCE WILL BE GIVEN TO A CANDIDATE WHO CAN OCCASIONALLY WORK ONSITE AS NEEDED AND PERFORM LOCAL ADMINISTRATIVE TASKS WITHING THE STATE OF SOUTH CAROLINA.

• PRIMARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

CRIBL DATA MODELING AND LOG PIPELINE INGESTION

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

ASSIST WITH DESIGN AND CONFIGURATION OF LINUX BASED SECURITY SENSORS AND ENDPOINT MONITORING TOOLS

• SECONDARILY ASSIST IN THE PLANNING, DESIGN, DEPLOYMENT AND OPERATIONAL SUPPORT OF ENTERPRISE SECURITY PLATFORMS, INCLUDING:

EXTENDED DETECTION AND RESPONSE (XDR)

VULNERABILITY MANAGEMENT PLATFORMS AND PROCESSES

DATA LOSS PREVENTION (DLP) SOLUTIONS

SECURITY AWARENESS AND TRAINING PLATFORMS

• COLLABORATE WITH SECURITY ARCHITECTS TO DESIGN AND IMPLEMENT ENTERPRISE SECURITY SOLUTIONS THAT ALIGN WITH LEADERSHIP’S BUSINESS GOALS, REGULATORY REQUIREMENTS AND ORGANIZATIONAL RISK TOLERANCE.

• DESIGN, DEPLOY AND MANAGE COUNTERMEASURES TO ADDRESS KNOWN SECURITY THREATS AND CONTRIBUTE TO MITIGATION STRATEGIES FOR EMERGING THREATS TO ENTERPRISE DATA, SYSTEMS AND SERVICES.

• ENSURE CONSISTENT APPLICATION OF SECURITY CONTROLS ACROSS ENTERPRISE INFRASTRUCTURE AND APPLICATIONS; VALIDATE CONTROL EFFECTIVENESS AND RECOMMEND IMPROVEMENTS.

• SUPPORT INCIDENT DETECTION AND RESPONSE ACTIVITIES THROUGH MONITORING, LOG ANALYSIS AND REPORTING.

• DEVELOP TECHNICAL DOCUMENTATION, IMPLEMENTATION GUIDES AND STANDARD OPERATING PROCEDURES AS NEEDED.

• PERFORM OTHER DUTIES AS ASSIGNED IN SUPPORT OF THE DEPARTMENT OF ADMINISTRATION’S DIVISION OF INFORMATION SECURITY.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• CRIBL DATA MODELING AND LOG PIPELINE DESIGN AND IMPLEMENTATION.

• Strong understanding of enterprise security architecture and engineering principles.

• Experience implementing and supporting enterprise security tools (SIEM, XDR, Vulnerability Management, DLP, endpoint security).

• Experience developing automation and integrations using scripting languages such as Python and Bash.

• Knowledge of cybersecurity best practices, threat detection, and defensive security strategies.

• Experience with Linux and Windows operating systems, including system hardening and security configuration.

• Understanding of networking concepts, security protocols, and secure system design.

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):

• HANDS-ON CRIBL DATA MODELING EXPERIENCE.

• Hands-on SIEM administration, analysis, and reporting experience.

• Experience building and deploying Linux-based security sensors.

• Familiarity with security frameworks and compliance standards such as NIST CSF, CJIS, IRS 1075, and CMS MARS-E.