hands-on Cribl experience.

Strong knowledge of Splunk or similar log management tools.

Experience building Cribl Stream pipelines, configuring sources/destinations, and troubleshooting errors.

Knowledge of log formats such as JSON, CEF, Syslog, CSV, and key-value.

Experience with Cribl deployment on AWS, S3 destinations, and IAM permissions.

Ability to interpret Splunk configurations, including props.conf, transforms.conf, and regex.

Understanding of Identity and Access Management (IAM).

Knowledge of OCSF schema and event mapping.

JavaScript, Python, and regex scripting.

Experience with pipeline testing and CI/CD.

Cribl Certified Administrator certification.