SIEM Data Engineer — Splunk & Cribl Expert

Allergan; North Chicago (IL); On-site; USD 100,000 - 170,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid time off

Job summary

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team to expand data capabilities, build scalable pipelines, and optimize SIEM data ingestion. You will transform unstructured logs into structured datasets, model data for warehousing, and ensure end-to-end data lineage while integrating diverse telemetry sources.

The role requires strong SPL, Splunk Enterprise administration, and CI/CD experience, with a focus on governance, data standardization, and analytics tooling

Qualifications

• Bachelor's degree with 5+ years' experience or Master's degree with 4+ years' experience.
• Experience writing and optimizing Splunk Search Processing Language (SPL).
• Proven ability to administer Splunk Enterprise and onboard data sources.
• Skills in developing data models, dictionaries, and reports within a SIEM platform.
• Experience building and configuring data pipelines.
• Experience with regular expressions and parsing unstructured data.
• Deep understanding of data administration and data standardization policies.
• Knowledge of database management systems, query languages, tables, and views.
• Experience validating data sets and calculations.
• Ability to work independently and in a team.
• Capable of learning new concepts quickly.
• Experience with CI/CD Pipelines and Git.
• Experience with database & system integration technologies.

Responsibilities

• Data Pipeline Development: Design, implement, and enhance streaming and batch data pipelines feeding SIEM and analytics engines.
• Data Transformation & Normalization: Route, filter, and harmonize data into structured datasets from logs.
• Data Modeling & Architecture: Build scalable data models and optimize storage in data warehouses.
• Data Integrity & Lineage: Verify data integrity across distributed systems and manage end-to-end lineage.
• Development & Integration: Connect security telemetry sources to SIEM, data warehouses, or repositories.
• Testing & Quality Assurance: Execute tests, debug routing issues, and document data flows.
• Data Management Operations: Catalogue, cache, and retrieve telemetry in SIEM and data lakes.
• Analytics Toolsets: Support analytics environments outside SIEM for long-term security analytics.
• Requirements & Capacity Planning: Define data specs and plan capacity changes.
• Governance & Standards: Enforce data ingestion standards and retention policies.
• Actionable Insights: Analyze data to uncover trends and improve data quality.
• Metrics Automation: Implement automation for metrics aggregation from SIEM and warehouses.

Skills

Splunk SPL

Splunk Enterprise

Data pipelines

CI/CD Pipelines

Python

Regex

ETL

Cribl

PowerShell

Go

Education

Bachelor's Degree + 5 years experience

Master's Degree + 4 years experience

Tools

Splunk

ELK

Exabeam

Cribl

Git

Python

PowerShell

Go

Job description

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team to expand data capabilities, build scalable pipelines, and optimize SIEM data ingestion. You will transform unstructured logs into structured datasets, model data for warehousing, and ensure end-to-end data lineage while integrating diverse telemetry sources.

The role requires strong SPL, Splunk Enterprise administration, and CI/CD experience, with a focus on governance, data standardization, and analytics tooling