SIEM Data Engineer: Splunk & Cribl Pipelines & Analytics

BioSpace; North Chicago (IL); On-site; USD 100,000 - 140,000; Full time

Job summary

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team (ISRM) to expand data capabilities and deliver high-value data management solutions. You will design pipelines, model data, and optimize the SIEM platform to empower analysts and protect the business.

Responsibilities include building data pipelines, transforming and normalizing data, and ensuring data integrity across distributed systems, while collaborating to connect security telemetry sources to SIEM and data

Qualifications

• Bachelor's or Master's with related experience
• Experience writing and optimizing Splunk SPL
• Experience administering Splunk Enterprise and onboarding data sources
• Experience building and configuring data pipelines
• Experience with regular expressions and parsing unstructured data
• Knowledge of database management systems and query languages
• Ability to work independently and in a team
• Exposure to CI/CD pipelines and data governance policies

Responsibilities

• Design, implement and enhance streaming and batch data pipelines feeding SIEM and downstream analytics
• Normalize and harmonize data from unstructured logs prior to SIEM ingestion
• Build scalable data models and schemas in data warehousing
• Ensure data integrity and end-to-end data lineage
• Integrate security telemetry sources with SIEM and data warehouses
• Document data flows, configurations and integration protocols
• Support analytics environments for security analytics and hunting
• Define data specifications and plan capacity changes across the stack
• Assist in developing data ingestion standards and retention procedures
• Analyze data sources to uncover trends and improve data quality

Education

Bachelor's degree with 5+ years or Master's with 4+ years

Tools

Splunk

CI/CD Pipelines

SQL

Job description

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team (ISRM) to expand data capabilities and deliver high-value data management solutions. You will design pipelines, model data, and optimize the SIEM platform to empower analysts and protect the business.

Responsibilities include building data pipelines, transforming and normalizing data, and ensuring data integrity across distributed systems, while collaborating to connect security telemetry sources to SIEM and data