[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-security-observability-engineer-starr-insurance-holdings-inc-de-us":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":66,"processed_longitude":67,"processed_employment_types":68,"processed_working_hours":69,"processed_working_hours_labels":71,"processed_home_office":72,"processed_salary_min":63,"processed_salary_max":64,"processed_salary_currency":60,"processed_salary_source":73,"processed_benefits":74,"processed_benefits_labels":78,"processed_industry":79,"processed_skills":7,"processed_job_location":80,"processed_full_address_gmaps":82,"processed_street_gmaps":84,"processed_city_gmaps":85,"processed_postal_code_gmaps":86,"processed_country_gmaps":88,"processed_country_iso_code_gmaps":90,"full_description":16,"formatted_description":16,"processed_employment_types_labels":35,"processed_home_office_labels":33,"processed_industry_labels":37,"processed_it_skills":91,"processed_it_skills_labels":94,"processed_soft_skills":95,"processed_soft_skills_labels":96,"processed_job_expertise_skills":97,"processed_job_expertise_skills_labels":98,"processed_language_requirements":99,"processed_total_experience_years":106,"processed_professional_field":107,"processed_professional_field_labels":110,"processed_leadership_role":12,"processed_date_posted":19,"raw_job_url":111,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":79,"canonical_industry_label":37,"max_cpc":112,"actual_cpc":7},65399,"security-observability-engineer-starr-insurance-holdings-inc","Security Observability Engineer",null,{"name":9,"slug":10,"logo_url":7},"Starr Insurance Holdings, Inc.","starr-insurance-holdings-inc",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":33,"employmentType":34,"industry":36,"skills":38,"baseSalary":58},"https:\u002F\u002Fschema.org\u002F","JobPosting","Join Starr, a global leader in commercial insurance with over a century of expertise. We empower our employees to innovate, make impactful decisions, and build lasting client relationships worldwide. At Starr, you'll work in an entrepreneurial culture alongside accessible leaders, leveraging our financial strength and vast industry experience to deliver solutions for our clients, no matter how complex. Grow your career with a rapidly growing company that invests in its people and their ability to drive real progress. Security Observability Engineer Job Overview We are seeking an experienced Security Observability Engineer to lead the migration, optimization, and secure operation of our log ingestion and observability pipelines. The role emphasizes secure data delivery, advanced SIEM coverage, Splunk expertise, data reduction strategies, and robust load balancing and high availability for log infrastructure. Key Responsibilities • End-to-End SIEM Pipeline Management & Optimization • Lead the migration of log sources from Splunk ingestion to Cribl Stream\u002FEdge pipelines, ensuring load-balanced, fault-tolerant delivery and processing of security and IT logs. • Architect and manage scalable, resilient pipelines—including design, implementation, and operation of load balancing solutions (e.g., Cribl worker groups, external load balancers, or syslog load distribution) for high ingest volumes. • Analyze, tune and securely onboard all log sources (firewalls, EDR, cloud, authentication, proxies, etc.)—covering parsing, filtering, and data reduction techniques to minimize Splunk ingest\u002Fstorage costs without sacrificing security coverage. • Develop and maintain Cribl and Splunk configurations, including advanced transformations, field normalization, masking, and enrichment for security analytics. • Ensure optimal distribution of logging workload across Cribl worker nodes and Splunk indexers to prevent bottlenecks, data loss, or single points of failure. • Security Event Visibility and SOC Enablement • Collaborate with SOC, IR, and threat detection teams to ensure all security logs reach the SIEM eRiciently and reliably, and logs are tuned for actionable detection. • Actively monitor, test, and remediate pipeline balancing and ingestion health to maximize uptime and forensic visibility. • Respond to and resolve SIEM and pipeline issues that impact security, detection, or compliance visibility. • Governance, Compliance & Documentation • Apply and document security policies for log routing, load balancing, event retention, and integrity—ensuring pipeline architecture meets audit, legal, and privacy requirements. • Track and report ingest reduction, Splunk cost savings, pipeline health, and event loss\u002Fdrop rates across the load-balanced infrastructure. • Maintain clear, up-to-date documentation of log flows, pipeline topology, load balancing strategies, and operational procedures. Required Skills & Qualifications • Extensive hands-on experience with Splunk SIEM engineering (indexers, search heads, clustering, forwarders, CIM, performance\u002Fload optimization). • 2+ years with Cribl Stream\u002FEdge, including deployment and tuning of distributed, load-balanced pipelines. • Deep understanding of machine data transport (syslog, HEC, TCP, UDP), log balancing strategies (syslog balancers, DNS round-robin, Cribl worker groups, etc.), and high-availability logging environments. • Proven expertise onboarding, parsing, and tuning security log sources (firewalls, cloud, EDR\u002FXDR, IAM, authentication, and networking) for best possible coverage and SOC\u002FIR support. • Advanced Splunk SPL, data model, event parsing, and alert tuning skills; practical SIEM optimization experience. • Scripting\u002Fautomation ability (Python, shell\u002FCLI, or similar) for pipeline management and validation. • Strong troubleshooting, monitoring, and operational dashboard skills for both pipeline and SIEM health. Preferred Qualifications • Hands-on experience designing and operating clustered\u002FHA Cribl and Splunk deployments (worker groups, clustered indexers, resilient data forwarders, etc.). • Splunk ES or Cribl certifications. Key Success Metrics • No loss of security data or alert coverage during\u002Fafter pipeline migration and optimization. • Documented, measurable reductions in Splunk ingest volume and operational\u002Fstorage cost. • Consistently balanced log throughput and minimal risk of bottlenecks or overloads—pipeline health and reliability metrics maintained above SLA. • Well-documented, adaptable pipeline and load balancing architecture. The estimated salary range for this position is 90k-120k Starr is an equal opportunity employer, which means we'll consider all suitably qualified applicants regardless of gender identity or expression, ethnic origin, nationality, religion or beliefs, age, sexual orientation, disability status or any other protected characteristic. We recruit and develop our people based on merit and we're committed to creating an inclusive environment for all employees. We offer first class training and development opportunities to all employees. Our aim is to grow our own talent and bring out the best in people. Starr is a global insurance and investment organization providing property and casualty insurance solutions to business and industry, and one of the fastest-growing insurance companies in the world. Our talented and experienced associates manage risk and ultimately support the profitable growth of organizations in a dynamic, competitive and ever-changing marketplace. Join us and become part of our talented and passionate workforce. https:\u002F\u002Fstarr.com\u002FAbout\u002FCareers",{"@type":18,"name":9},"Organization","2026-06-23","2027-06-23",[22],{"@type":23,"address":24,"geo":29},"Place",{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},"PostalAddress","Destin","US","Florida",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",30.389606,-86.48362340000001,"ONSITE",[35],"PERMANENT",[37],"Insurance",[39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"Splunk","Cribl Stream\u002FEdge","Python","Shell\u002FCLI","Syslog","HEC","TCP\u002FUDP","Collaboration","Communication","Problem Solving","Documentation","SIEM Engineering","Log Management","Data Reduction","Load Balancing","High Availability","Security Operations","Incident Response","Compliance",{"@type":59,"currency":60,"value":61},"MonetaryAmount","USD",{"@type":62,"minValue":63,"maxValue":64,"unitText":65},"QuantitativeValue",90000,120000,"YEAR",[31],[32],"permanent",[70],"FULL_TIME",[70],"onsite","estimated",[75,76,77],"First class training and development opportunities","Inclusive environment","Career growth opportunities",[75,76,77],"insurance",[81],"starr, destin, fl, united states of america",[83],"Destin, Florida 32541, USA",[],[26],[87],"32541",[89],"USA",[27],{"hec":92,"python":93,"splunk":92,"syslog":92,"tcp\u002Fudp":92,"shell\u002Fcli":93,"cribl stream\u002Fedge":92},4,3,[39,40,41,42,43,44,45],{"collaboration":92,"communication":92,"problem solving":92,"documentation":92},[46,47,48,49],{"compliance":93,"data reduction":92,"load balancing":92,"log management":92,"siem engineering":92,"high availability":92,"incident response":93,"security operations":92},[50,51,52,53,54,55,56,57],{"detected_language_jobad":100,"required":101},"en",[102],[103],{"language":104,"level":105},"ENGLISH","C1",5,[108,109],"Information and Communications Technology","Security",[108,109],"https:\u002F\u002Fstarrcompanies.wd1.myworkdayjobs.com\u002Fen-us\u002Fcareers\u002Fjob\u002Fdestin-fl\u002Fsecurity-observability-engineer_jr4251",1]