Senior Splunk / Cribl Engineer - Cybersecurity Engineering (Remote)

Company DescriptionAbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn. Job DescriptionThis position is part of AbbVie’s Information Security & Risk Management (ISRM) team. We are here to put our partners in a position to succeed. We do it by providing the knowledge, tools, and support they need to effectively use data and technology while also effectively managing risk. This position can be remote anywhere in the U.S.AbbVie Information Security is looking for a highly motivated and talented individual to join the Cyber Security Engineering (CSE) Team. The Cyber Security Engineering installs, manages, optimizes, automates the tools in use by the broader Information Security and Risk Management teams.Data Management services are a foundation for the CSE team’s portfolio, inclusive of data transformations and pipelining to downstream systems. The CSE team acts as subject matter experts and assists with training and development of their userbase, expanding beyond the scope of Information Security and Risk Management.This is an expansion of capabilities within the Cyber Security Engineering Team, focusing on the data pipelines, data models, and adherence to standards across our datasets. Grow with us as a Data Engineer, Cyber Security Engineering (CSE) to raise our tools and skilled analysts up so that they may help our business to continue to have remarkable impacts on people’s lives. This role is responsible for delivering the value of data management toolsets, inclusive of the data pipelines and the SIEM platform. The Data Engineer will assist with data onboarding, normalization/harmonization, pipelining, data modelling, and documentation while striving for automation and quality delivery.Our team focuses on leveraging CI/CD pipelines for automated builds and deployments across all of our supported toolsets, while implementing a mix of legacy and cloud-native infrastructure and services. The ideal candidate must be comfortable to adapting and learning new terminology, processes, and techniques in use within Information Security teams and be comfortable working in Scrum and Agile/DevOps methodologies.In this role you will be responsible for:

Implementation and development of data pipelines that feed the SIEM and other analytics engines using existing toolsets

Creating structured data sets from unstructured data

Build data models and enhance standard schemas across different technologies

Normalize/Harmonize data across various platforms

Verify data integrity and translations against multiple systems

Creation and support of analytic toolsets outside the SIEM

Assist in analysis and defining data requirements and specifications

Assist in analysis and planning for anticipated changes in data capacity requirements

Assist in developing and documenting data standards, policies, and procedures

Perform compilation, cataloging, caching, distribution, and retrieval of data within the SIEM and other platforms

Analyze data sources to provide actionable recommendations

Develop standards and automations in metrics aggregation and dissemination

Manage data lineage across various systems

Designs enhancements, updates, and programming changes for portions and subsystems of data pipelines, repositories or models for structured/unstructured data.

Analyzes design and determines coding, programming, and integration activities required based on specific objectives and established project guidelines.

Executes and writes portions of testing plans, protocols, and documentation for assigned portion of application; identifies and debugs issues with code and suggests changes or improvements.

Participates as a member of a project team to develop reliable, cost effective, and high-quality solutions for data systems, models, or components.

Significant Work Activities -Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)

QualificationsTools and skills you will use in this role:

Heavy team collaboration skills.

Splunk

Crible

Scrum & Agile development

Git-Ops

Experiences that make you a strong fit for this role:Required:

Bachelor’s Degree with 6 years’ experience; Master’s Degree with 5 years’ experience; PhD with 0 years’ experience OR relative work experience

Skills in developing data models, dictionaries, and reports within a SIEM platform

Experience building and configuring data pipelines and architectures

Experience with regular expressions and parsing unstructured data

Deep understanding of data administration and data standardization policies

Knowledge of database management systems, query languages, table relationships, and views

Experience in validating data sets and calculations

Ability to work both independently without direction and within a group for day-to-day activities

Capable of learning new concepts and processes quickly, and adapting to a constantly changing environment

Experience with CI/CD Pipelines and Git

Experience with database & system integration technologies

Prior experience working with ETL in a SIEM environment (ELK, Splunk, Exabeam, etc)

Beneficial:

Prior experience working in an Agile team

Familiarity with cybersecurity, privacy principles, cyber threats, and vulnerabilities

Prior experience working with ETL in a SIEM environment (ELK, Splunk, Exabeam, etc)

Demonstrated experience in implementing regular expressions

Experience working with development tools and scripting languages (Python / PowerShell / Go)

Experience analyzing and pivoting on large sets of data, with the ability to identify patterns, anomalies, and outliers

Ability to identify basic common coding flaws

Demonstrated experience in log analysis and parsing of unstructured data (ETL)

Amazon Solutions Architect / Azure Data Engineer Associate / Cloud Professional Data Engineer Certification

If you believe you’re a great fit for this job but don’t have all of the experiences listed above, we encourage you to apply anyway!Why Business Technology SolutionsFor anyone who wants to use technology and data to make a difference in people’s lives, shape the digital transformation of a leading biopharmaceutical company, and secure sustainable career growth within a diverse, global team: we’re ready for you.Additional InformationApplicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​

The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.​

We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​

This job is eligible to participate in our short-term incentive programs. ​

Note: No amount of pay is a considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. ​AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion. It is AbbVie’s policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:https://www.abbvie.com/join-us/reasonable-accommodations.html