Data Analysis & Visualization Sr Engineer - Splunk NC, FL, GA, MD, OH

Key Skills

Java Programming, Python Programming, SQL, AWS, Linux Operating system, Splunk, Data Architecture

Job Description

The Data Analytics team at AIG is responsible for developing scalable, resilient, and high-availability solutions to collect and search against massive datasets in a complex, global environment. The Data Analytics organization is also responsible for interfacing directly with data producers in AIG, ensuring high quality, comprehensive data collection in Splunk across a complex, global IT environment. This position provides the day-to-day operations and engineering of the security information and event management (SIEM) solution. This includes configuration management, role based access controls (RBAC), application and data ingest. The role must demonstrate the knowledge and problem-solving skills to support the daily operations of a SIEM solution. Must be able to solve problems presented by junior engineers and analysts and finding the appropriate resolutions without introducing risk or complexity. This engineer will also be responsible for developing content to support security and operational monitoring and alerting to various teams and lines of business utilizing Splunk and other third-party orchestration software.

Responsibilities

• Supports and oversees all the engineering activities to include change management, platform performance and stability, and initial data ingest and normalization.
• Maintains and monitors the service tickets and addresses ongoing support for the business units and their data feeds.
• Takes an active role in the daily standups and agile frameworks to ensure tasks are being completed/delivered in a timely manner.
• Supports the engineering team to help address the day-to-day activities and provides leadership for the team to become more efficient.
• Administration of Splunk and Splunk Enterprise Security and underlying infrastructure.
• Building automation, dashboards, correlations, key performance indicators, and other various Splunk knowledge objects to empower security operations by improving the quality of their threat detection capabilities

Qualifications

• Bachelor of Science in Computer Science, Information Systems, Software Engineering, or any combination of education and relevant experience
• Strong Microsoft Office skills
• Experience working in teams
• Good prioritization skills, ability to balance time across key priorities
• Engineering experience with security information and event management (SIEM) solutions
• Microsoft and Linux operating system skills
• Strong understanding of operating systems and network infrastructures
• Prioritized certifications: Splunk Enterprise Certified Architect; Splunk Enterprise Certified Admin; AWS Certified Solutions Architect; Linux Foundation Certified Sysadmin/Engineer
• Proven extensive technical experience in Cybersecurity and Information Technology.
• Deep hands-on knowledge of Splunk and Splunk Enterprise Security to include the Splunk query language, configuration management, and underlying infrastructure
• Experience working in Linux and Windows based environments, including administration and engineering of solutions running on Linux and Windows OS
• Experience with aspects of AWS cloud architecture, including mechanisms for high availability, auto-scaling, and cost efficiency
• Strong ability to communicate via written and verbal communication in both formal and casual situations
• Demonstrated ability to handle stressful situations with calm effectiveness