Senior Splunk / Cribl Engineer - Cybersecurity Engineering (Remote) - job 2 of 2

Company DescriptionAbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas immunology, oncology, neuroscience, and eye care and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com. Follow @abbvie onTwitter,Facebook,Instagram,YouTubeandLinkedIn.Job DescriptionThis position is part of AbbVies Information Security & Risk Management (ISRM) team. We are here to put our partners in a position to succeed. We do it by providing the knowledge, tools, and support they need to effectively use data and technology while also effectively managing risk.This position can be remote anywhere in the U.S.AbbVie Information Security is looking for a highly motivated and talented individual to join the Cyber Security Engineering (CSE) Team. The Cyber Security Engineering installs, manages, optimizes, automates the tools in use by the broader Information Security and Risk Management teams.Data Management services are a foundation for the CSE teams portfolio, inclusive of data transformations and pipelining to downstream systems. The CSE team acts as subject matter experts and assists with training and development of their userbase, expanding beyond the scope of Information Security and Risk Management.This is an expansion of capabilities within the Cyber Security Engineering Team, focusing on the data pipelines, data models, and adherence to standards across our datasets. Grow with us as a Data Engineer, Cyber Security Engineering (CSE) to raise our tools and skilled analysts up so that they may help our business to continue to have remarkable impacts on peoples lives.This role is responsible for delivering the value of data management toolsets, inclusive of the data pipelines and the SIEM platform. The Data Engineer will assist with data onboarding, normalization/harmonization, pipelining, data modelling, and documentation while striving for automation and quality delivery.Our team focuses on leveraging CI/CD pipelines for automated builds and deployments across all of our supported toolsets, while implementing a mix of legacy and cloud-native infrastructure and services. The ideal candidate must be comfortable to adapting and learning new terminology, processes, and techniques in use within Information Security teams and be comfortable working in Scrum and Agile/DevOps methodologies.In this role you will be responsible for:• Implementation and development of data pipelines that feed the SIEM and other analytics engines using existing toolsets• Creating structured data sets from unstructured data• Build data models and enhance standard schemas across different technologies• Normalize/Harmonize data across various platforms• Verify data integrity and translations against multiple systems• Creation and support of analytic toolsets outside the SIEM• Assist in analysis and defining data requirements and specifications• Assist in analysis and planning for anticipated changes in data capacity requirements• Assist in developing and documenting data standards, policies, and procedures• Perform compilation, cataloging, caching, distribution, and retrieval of data within the SIEM and other platforms• Analyze data sources to provide actionable recommendations• Develop standards and automations in metrics aggregation and dissemination• Manage data lineage across various systems• Designs enhancements, updates, and programming changes for portions and subsystems of data pipelines, repositories or models for structured/unstructured data.• Analyzes design and determines coding, programming, and integration activities required based on specific objectives and established project guidelines.• Executes and writes portions of testing plans, protocols, and documentation for assigned portion of application; identifies and debugs issues with code and suggests changes or improvements.• Participates as a member of a project team to develop reliable, cost effective, and high-quality solutions for data systems, models, or components.• Significant Work Activities -Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)QualificationsTools and skills you will use in this role:• Heavy team collaboration skills.• Splunk• Crible• Scrum & Agile development• Git-OpsExperiences that make you a strong fit for this role:Required:• Bachelors Degree with 6 years experience; Masters Degree with 5 years experience; PhD with 0 years experience OR relative work experience• Skills in developing data models, dictionaries, and reports within a SIEM platform• Experience building and configuring data pipelines and architectures• Experience with regular expressions and parsing unstructured data• Deep understanding of data administration and data standardization policies• Knowledge of database management systems, query languages, table relationships, and views• Experience in validating data sets and calculations• Ability to work both independently without direction and within a group for day-to-day activities• Capable of learning new concepts and processes quickly, and adapting to a constantly changing environment• Experience with CI/CD Pipelines and Git• Experience with database & system integration technologies• Prior experience working with ETL in a SIEM environment (ELK, Splunk, Exabeam, etc)Beneficial:• Prior experience working in an Agile team• Familiarity with cybersecurity, privacy principles, cyber threats, and vulnerabilities• Prior experience working with ETL in a SIEM environment (ELK, Splunk, Exabeam, etc)• Demonstrated experience in implementing regular expressions• Experience working with development tools and scripting languages (Python / PowerShell / Go)• Experience analyzing and pivoting on large sets of data, with the ability to identify patterns, anomalies, and outliers• Ability to identify basic common coding flaws• Demonstrated experience in log analysis and parsing of unstructured data (ETL)• Amazon Solutions Architect / Azure Data Engineer Associate / Cloud Professional Data Engineer CertificationIf you believe youre a great fit for this job but dont have all of the experiences listed above, we encourage you to apply anyway!Why Business Technology SolutionsFor anyone who wants to use technology and data to make a difference in peoples lives, shape the digital transformation of a leading biopharmaceutical company, and secure sustainable career growth within a diverse, global team: were ready for you.Additional InformationApplicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:• The compensation range described below is the range of possible base pay compensation that the Company believes ingood faith it will pay for this role at the time of this posting based on the job grade for this position. Individualcompensation paid within this range will depend on many factors including geographic location, and we may ultimatelypay more or less than the posted range. This range may be modified in the future.• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/visioninsurance and 401(k) to eligible employees.• This job is eligible to participate in our short-term incentive programs.Note: No amount of payis a considered to bewages or compensation until such amount is earned, vested, and determinable.The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefitsthat are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid andmay be modified at the Companys sole and absolute discretion, consistent with applicable law.AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion. It is AbbVies policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.US & Puerto Rico only - to learn more, visithttps://www.abbvie.com/join-us/equal-employment-opportunity-employer.htmlUS & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:https://www.abbvie.com/join-us/reasonable-accommodations.html