Splunk & Cribl SIEM Data Engineer

AbbVie; North Chicago (IL); On-site; USD 115,000 - 170,000; Full time

Job summary

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team to expand data capabilities. You will design robust streaming and batch pipelines, normalize data for SIEM ingestion, and build scalable data models for secure storage.

The role emphasizes data integrity, end-to-end lineage, and integrations across telemetry sources, SIEM, and data warehouses, with a strong focus on security analytics and hunting.

Qualifications

• Bachelor's or Master’s degree with relevant experience in data engineering or security analytics
• Proficient in SPL for search optimization and data extraction
• Proven ability to administer Splunk Enterprise and onboard data sources
• Experience building data models, dictionaries, and reports within a SIEM
• Experience designing and configuring data pipelines
• Proficiency with regular expressions and parsing unstructured data
• Strong understanding of data governance and standardization policies
• Knowledge of database management systems and query languages

Responsibilities

• Design, implement, and enhance streaming and batch data pipelines feeding SIEM and downstream analytics.
• Normalize and harmonize data from unstructured logs before SIEM ingestion.
• Build scalable data models and optimized storage in data warehousing environments.
• Ensure data integrity and end-to-end data lineage across systems.
• Develop integrations to connect security telemetry to SIEM and data warehouses.
• Document data flows, configurations, and integration protocols with QA.
• Support analytics environments for security analytics and hunting.
• Plan capacity changes for streaming, routing, indexing, and storage infrastructure.
• Help enforce data ingestion standards and retention policies across platforms.
• Extract insights from diverse data sources to improve data quality and provide recommendations.
• Develop automation for metrics aggregation and dissemination from SIEM and data stores

Skills

SPL

Splunk Enterprise

Data pipelines

Data models

Regex

Data governance

Database concepts

Education

Bachelor's Degree (5+ years)

Master's Degree (4+ years)

Tools

Splunk

Job description

AbbVie is seeking a Data Engineer within the Cyber Security Engineering team to expand data capabilities. You will design robust streaming and batch pipelines, normalize data for SIEM ingestion, and build scalable data models for secure storage.

The role emphasizes data integrity, end-to-end lineage, and integrations across telemetry sources, SIEM, and data warehouses, with a strong focus on security analytics and hunting.