Cribl does differently. What does that mean? It means we are a serious company that doesn’t take itself too seriously; and we’re looking for people who love to get stuff done, and laugh a bit along the way. We’re growing rapidly - looking for collaborative, curious, and motivated team members who are passionate about putting customers first. As a remote-first company we believe in empowering our employees to do their best work, wherever they are. As the data engine for IT and Security many of the biggest names in the most demanding industries trust Cribl to solve their most pressing data needs. Ready to do the best work of your career? Join the herd and unlock your opportunity. Why You’ll Love This Role ​We are seeking a talented and experienced Staff AI Security Engineer to help build Cribl’s new AI Systems team. In this pivotal role, you will design, implement, and operationalize security and governance frameworks that enable rapid AI adoption to scale safely across Cribl’s internal systems and workflows. This is a foundational role on a newly established team tasked with providing the shared infrastructure, security guardrails, and reusable patterns needed to turn AI from fragmented experimentation into durable company capabilities. You will be instrumental in bringing security, governance, and safety to Cribl’s rapidly expanding AI footprint, including API tokens, secrets management, MCP security, shadow AI mitigation, AI telemetry, and compliance readiness. The team’s mandate is to provide the “paved road” for AI at Cribl: secure access, governed integrations, reusable workflows, and a platform that enables teams to move faster without creating security, compliance, or operational risk. This role will be part of the Corporate AI Systems team and will report directly to the Chief Information Security Officer (CISO). It will partner closely with stakeholders across Security, Enterprise Applications, Product, Engineering, IT, Legal, and the various business teams adopting AI to ensure Cribl’s AI capabilities scale securely and pragmatically. As An Active Member Of Our Team, You Will... As the Staff AI Security Engineer, you will be the foundational builder of Cribl’s AI security and governance layer. Your key responsibilities will include: - AI Security Architecture & Governance: Define, threat model, and operationalize the security architecture for Cribl’s internal AI platform, including standards, controls, approval patterns, and secure-by-design guidance for AI use cases before they scale into production. - Shadow AI Discovery & Remediation: Partner with Business Operations to maintain visibility into AI tools, licenses, API tokens, MCP servers, and ad hoc workflows in use across the company, and monitor for ungoverned or high-risk patterns that require remediation. - MCP Security & Registry Management: Own the framework for vetting MCP servers, maintaining an approved registry, defining risk tiers, and enforcing secure connection patterns as MCP adoption expands across teams. - Secrets, Identity & Token Protection: Establish secure patterns for secrets management, non-human identities, scoped credentials, OAuth-based access, and token governance to enforce least-privilege access and reduce credential exposure in AI builds. - Prompt Injection Defense & Safe Execution Controls: Design and deploy guardrails for prompt injection defense, deterministic validation, human-in-the-loop approvals, and additional controls for high-risk workflows that combine sensitive data, untrusted content, and external action. - AI Telemetry, Detection & Incident Response: Partner on building Cribl as the observability backbone for AI systems, including telemetry pipelines, abuse detection, audit trails, threat hunting, and incident response patterns for AI-specific security events. - Compliance & Customer Governance Readiness: Partner with Cribl’s Compliance team to drive documentation and control readiness for AI-related obligations and customer scrutiny, including NIST AI RMF, ISO 42001, EU AI Act readiness, AI acceptable use standards, and customer-facing AI governance materials. - Secure AI-Assisted Corporate Engineering Enablement: Establish the security controls required for AI-assisted internal development, secure coding practices, secrets management, SCA/SAST/DAST expectations, and review patterns for AI-generated code and workflows. - Risk Metrics & Security Effectiveness: Define and track the metrics that matter most for AI security, including shadow AI exposure, control coverage, incident trends, security review turnaround, and reduction of high-risk patterns as the platform scales across the company. - We are a remote-first company and work happens across many time-zones - you may be required to occasionally perform duties outside your standard working hours. If You’ve Got It - We Want It - Staff-level security engineering experience: 7+ years of experience in security engineering, application security, cloud security, identity and access management, detection engineering, or related technical security roles, with a track record of building practical controls that scale. - AI security fluency: Strong hands-on experience with modern LLM and agentic systems, including threat models for prompt injection, tool use, model access, RAG, AI coding tools, and API-driven integrations. - Identity, secrets, and governance depth: Proven experience with OAuth, service identities, secrets management, RBAC / ABAC / scoped permissions, auditability, and secure-by-default architecture patterns. - Security architecture judgment: Experience designing risk-tiered controls, approval models, and protective guardrails that balance innovation with real-world compliance and operational needs. - Detection and incident response mindset: Ability to operationalize telemetry, define actionable detections, investigate security signals, and build pragmatic response paths for new threat surfaces. - Compliance and customer trust orientation: Familiarity with frameworks and customer expectations relevant to enterprise AI governance, including NIST AI RMF, ISO 42001, SOC 2, GDPR, SOX, or adjacent control environments. - Cross-functional communication: Strong written and verbal communication skills, with the ability to simplify risk, controls, and tradeoffs for engineers, business stakeholders, and senior leaders alike. - Builder mentality: You are comfortable creating the first version of the registry, the standards, the playbooks, and the guardrails. Ambiguity energizes you. - Outcome orientation: You care about materially reducing risk while enabling useful AI adoption. You understand that security only works if it is practical enough to be used. - Preferred Qualifications - Experience with AI development tools like Claude Code, AWS Bedrock, or similar enterprise AI platforms. - Experience with MCP, skills, API security, gateway technologies, or tool-use architectures for AI agents. - Familiarity with multi-agent workflow design, workflow security patterns, and human-in-the-loop orchestration controls. - Experience with SCA / SAST / DAST, secrets management, SIEM / telemetry pipelines, and secure software delivery controls. - Familiarity with enterprise systems such as Salesforce, NetSuite, Workday, Jira, Confluence, Slack, Google Drive, and Glean, especially where AI workflows introduce differentiated risk. - Experience operating in a high-growth, remote-first B2B SaaS environment. - Comfort partnering closely with Security, IT, GTM Ops, Finance, People, Legal, and Support stakeholders. - Good jokes, or maybe better, bad jokes. - A love for goats. Salary Range ($128,000 - $200,000) The salary for this role is dependent on geographic location. The salary offered within the range described will be based on the individual candidate’s job-related knowledge, skills, and experience. In addition to a competitive salary, Cribl also offers a generous benefits package which includes health, dental, vision, short-term disability, and life insurance, paid holidays and paid time off, a fertility treatment benefit, 401(k), equity, and eligibility for a discretionary company-wide bonus. #LI-KJ1 #LI-Remote Bring Your Whole Self Diversity drives innovation, enables better decisions to support our customers, and inspires change for the better. We’re building a culture where differences are valued and welcomed, and we work together to bring out the best in each other. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying. Interested in joining the Cribl herd? Learn more about the smartest, funniest, most passionate goats you’ll ever meet at cribl.io/about-us.

• Lead the execution of cybersecurity risk assessments across products, SaaS platforms, infrastructure, cloud environments, vendors, and business processes • Apply NIST RMF (800‑37, 800‑30, 800‑53), ISO 27001/27701/22301, and internal Blue Yonder cybersecurity standards in all assessments • Maintain and enhance the enterprise risk register, ensuring all risks are documented, categorized, and monitored • Develop and drive risk‑response plans, collaborating with system owners, product teams, engineering, and cloud operations • Validate mitigation effectiveness and track remediations through closure • Provide expert recommendations on security controls, configuration standards, and compensating controls • Build KPIs, KRIs, dashboards, and reporting mechanisms to measure risk posture and program performance • Present risk trends, escalations, and mitigation progress to senior leadership • Ensure compliance with internal policies such as Cybersecurity Policy, Access Control Policy, Acceptable Use, and Information Classification Standards • Partner with Threat & Vulnerability Management, Application Security, Security Architecture, and GRC teams to ensure unified risk strategy and visibility • Collaborate with Legal, Compliance, and Commercial teams on contract risk requirements and customer security obligations • Promote a risk‑aware culture by educating stakeholders on risk principles, threat landscapes, and security responsibilities • Contribute to ongoing training and awareness initiatives aligned with Blue Yonder’s enterprise security program

MAIN PURPOSE OF THE JOB: ​​​As the IT Security Operations Engineer, you will play a crucial role in the analysis, design, implementation, and ongoing management of security controls. The IT Security Operations Engineer is responsible for maintaining the confidentiality, integrity, and availability of our information assets, safeguarding against emerging threats and vulnerabilities. This role involves managing complex projects, spearheading continuous improvement initiatives, and implementing innovative technologies and methodologies to maintain robust cybersecurity defenses against evolving threats. ​You will contribute to steering Viant to face future cybersecurity challenges. Leveraging your strong technical expertise to develop, deploy, and implement innovative solutions that enhance reliability, scalability, and our security posture. By aligning IT Security with business objectives, you will ensure the uninterrupted production of medical devices. ​Additionally, you will have the opportunity to work with every site and department within Viant, fostering personal growth and professional development through diverse interactions and projects. As an associate within Viant IT, you will embody and promote Viant values, ensuring that you operate with integrity, accountability, and a commitment to excellence. You will play a crucial role in contributing to the overall success of Viant as a whole.​​ KEY RESPONSIBILITIES AND DUTIES: - ​​​Act in alignment with the core values of the company, demonstrating agility, teamwork, leadership, ownership, customer focus, and integrity in all actions. - ​Provide support outside regular working hours to ensure Viant’s security and address urgent issues when required to support business operations. - ​Engage actively in company-wide and site-specific projects aimed at continuous improvement of processes. - ​Analyze and assess the effectiveness of existing security controls, policies, and procedures. - ​Design, implement, and configure security measures to enhance the protection of Viant's IT environment. - ​Conduct ongoing analysis of emerging threats and vulnerabilities, providing proactive recommendations for control improvements. - ​Design, implement, and continuously improve Zero Trust security controls, focusing on identity, device posture, least privilege, and continuous verification. - ​Own the end‑to‑end vulnerability management lifecycle, including discovery, prioritization, remediation tracking, and risk acceptance. - ​Correlate vulnerability data with asset criticality, exploitability, and business impact. - ​Collaborate with internal teams and external vendors to ensure the operational efficiency of security controls. - ​Configure and manage intrusion detection systems, network forensics, and endpoint security solutions. - ​Independently evaluate and enhance security controls to ensure alignment with industry best practices and organizational goals. - ​Provide expertise in the development and execution of disaster recovery controls. - ​Conduct regular internal security audits to assess compliance with established controls. - ​Monitor and respond to cybersecurity incidents, working alongside the Security Incident Response Team in incident response activities. - ​Safeguard sensitive information and adhere to applicable regulations and policies. - ​Lead post-incident analysis to ensure accurate root causes of incidents are identified, appropriate preventive actions are realized and tracked, and to reduce the likelihood of future cybersecurity events. - ​Manage physical security controls and manufacturing systems. - ​Contribute to the development of cybersecurity reports and business technical guidance. - ​Stay informed about cybersecurity trends and contribute to the development of the Viant security strategic plan. - ​Collaborate with the IT Security Manager on cybersecurity risk management and vendor risk management. - ​Work closely with the Security Team on identity access management and user access control. - ​Collaborate with relevant stakeholders for 3rd party cybersecurity audits, penetration testing, and vulnerability assessments. - ​Maintain and update documentation related to security procedures and configurations. - ​Maintain knowledge of Viant corporate IT policies and Viant privacy policies. - ​Report any security incident or suspected security incident to the Viant Security Incident Response Team. - ​All other duties as assigned.​​ POSITION REQUIREMENTS: Knowledge/Education: - ​​​Bachelor’s degree in information security, Cybersecurity, or a related field required - ​Security + required - ​Microsoft 365 certifications preferred - ​CISSP preferred​​ Job Experience: - ​​​​​7+ years of system administrator experience required - ​4+ years in IT Security Operations experience required - ​3+ years of manufacturing experience preferred - ​Preferred prior experience working from home with designed work area and high-speed internet connection​​​​ Skills/Competencies: - Ability to work effectively in a fast-paced team environment as well as independently. - Resourcefulness in handling unexpected challenges. - Must have excellent time management skills with the ability to work independently with little supervision. - Highly self-motivated, enthusiastic, who has the ability to understand and take the “big picture” into account - Strong aptitude for working with technology, ability to learn and absorb innovative technologies quickly. - Proven capability in managing multiple tasks simultaneously and prioritizing time efficiently. - Demonstrated understanding of fundamental critical thinking concepts, with a proven ability to apply these principles to effective problem solving. - Proven documentation skills including policies and procedures. - Pro-active in identifying potential issues with a proposed process or systems change. - Advanced understanding of cybersecurity principles, protocols, and best practices. - In-depth working knowledge of networking, firewalls, routing, switching, and wireless technologies. - Experience with intrusion detection systems, network forensics, and endpoint security solutions. - Configuring, managing, and utilizing SIEM for security event monitoring, log correlation, and incident detection.  - Expertise in designing, configuring, and managing security controls. - Ability to conduct proactive research on emerging security threats and vulnerabilities. - Strong analytical, problem-solving, and troubleshooting skills. - Capacity to work independently and as part of a team in a fast-paced environment. - Proven experience in coordinating with counterparts in a distributed organization. - Stay up-to-date with the latest developments in cybersecurity. - Microsoft 365 Services (Entra, Intune, Security, Compliance, Endpoint, Purview) - Hands‑on experience with Zero Trust concepts, identity‑centric security, and conditional access controls. - Practical experience securing Azure and/or AWS cloud environments. - SPF, DKIM, DMARC understanding - Active Directory hardening - Endpoint hardening (Windows, Linux, IOT, Mobile) - Network IDS, IPS, secure wireless standards - Disaster Recovery design, planning, implementation, and testing - Ransomware protection - EDR/XDR experience - Penetration Testing - Endpoint encryption - Identity Threat Protection - Data Loss Prevention - Backup immutability and air gapping - Privileged Access Management - User Access Controls Travel: - Up to 25% of the time or as needed - We offer market competitive compensation. Potential salary range for this role is $100k-$130k. Actual pay will be determined based on experience, qualifications, geographic location, and other job-related factors permitted by law.

Account Executive – Physical Security Solutions, Ohio Territory Account Executive- Physical Security Solutions Overview: The Physical Security Solutions Account Executive is responsible for driving new customer acquisition across the State of Ohio. This role will focus on expanding our footprint by building strong relationships, uncovering new opportunities, and delivering modern physical security solutions to organizations across the state. It’s an ideal fit for someone who thrives in territory development, enjoys opening new doors, and excels at consultative selling in markets where trust and execution are key. Account Executive- Physical Security Solutions Responsibilities: • Lead new customer acquisition efforts across Ohio, with a focus on the commercial real estate and multifamily verticals • Build and execute a territory growth plan centered on proactive outreach, discovery, and long-term account development • Own the prospect and customer-facing milestones of the sales lifecycle, from prospecting and discovery to solution positioning, proposal delivery, negotiation, and close • Conduct persuasive product and solution demos, aligning customer needs with cloud, on-prem, or hybrid physical security offerings • Partner closely with Sales Engineering and Technical Account Management to ensure accurate solution design and smooth project transitions • Represent K Group Companies at industry events, networking functions, and regional engagements • Maintain accurate CRM data, pipeline forecasts, and activity reporting • Act as a trusted advisor to prospects, helping them modernize legacy systems and plan long-term technology refresh cycles What Makes This Role Unique: • Ohio is a strategic growth market, you’ll be building on an existing foundation while expanding into new customer relationships • Significant modernization demand, organizations across the state are upgrading video and access infrastructure, creating consistent opportunity • High-visibility, high-impact work, your performance directly influences how we scale and invest in the region • Credible solutions, proven delivery, K Group Companies offers best-in-class cloud-managed, hybrid, and on-prem solutions without forcing a single approach Account Executive- Physical Security Solutions Qualifications: • Experience in B2B sales, ideally in physical security, low voltage integration, IT services or related technical industries • Strong consultative selling skills with the ability to run discovery, establish value, and tailor solutions to customer needs • High comfort level with prospecting and developing new relationships, territory growth requires initiative and discipline • Excellent presentation, communication, and relationship-building skills • High integrity, strong follow-through, and a commitment to solving real problems for customers • Willingness to travel regionally throughout Ohio for meetings, walkthroughs, and relationship development About K Group Companies K Group is a locally owned and operated technology service provider that was established in Grand Rapids, MI in 1980. We proudly serve clients across the United States, while remaining especially focused on our home state of Michigan. Our expertise spans a wide spectrum of technologies and services, ensuring that we deliver exceptional solutions at the highest level of quality. Rooted in principles of excellence and creativity, our culture is dedicated to fostering collaboration, innovation, and inclusivity. Why Work Here? “Great, focused, team environment.” For more than 40 years, K Group Companies has been one of West Michigan’s premier technology providers. From Managed IT services to physical security integration, our team has established itself as a known, trusted advisor to our community. As a local, 3rd generation family-owned business, we pride ourselves in reliable, intentional, and committed relationships with our customers – and each other! Whether we are helping customers secure their environment, beating each other at Mario Kart in our Team Zone arcade, or grabbing lunch at our local BBQ restaurant, we delight in collaboration and making a difference as a team. We truly believe that we are better together! Compensation and Benefits · Competitive base salary based on experience · Bonus and commission programs · Paid Time Off (PTO) · Volunteer Paid Time Off (VTO) · 100% employer paid family health insurance premium · 100% employer paid disability insurance · 100% employer paid dental & vision insurance · 401k with Safe Harbor contributions from company annually · Profit sharing opportunities