Sr. Splunk Data Engineer_

Atlanta

**Alternate Locations:** Work from Home

**Work Arrangement:**

Remote : Work at home employee residing outside of a commutable distance to an office location.

**Relocation assistance:** is not available for this opportunity.

**Requisition #:** 73272

**The Role at a Glance**

Lincoln Financial is looking for a cybersecurity focused data engineer. The position is primarily responsible for providing data collection, aggregation, and alerting services which enable our Cyber Security Investigations and Response team to detect and respond to security threats. This engineer will work closely with incident responders providing visibility into system events, logs, and other data and empower them to investigate and respond to issues quickly and effectively, leveraging our detection-and-response-as-code approach.

**What you'll be doing**

+ Work in partnership with security engineers, security response and investigation analysts, cloud security, infrastructure, and cloud development teams to drive improvements to monitoring and response capabilities.

+ Perform ongoing monitoring and health checks of event monitoring infrastructure assuring the highest levels of quality in data availability and integrity.

+ Create and maintain data models, data extractions, summaries, dashboards, and alerts to notify teams of domain specific issues.

+ Creation of data pipelines to collect, enrich, normalize, reduce, and route data into Enterprise SIEM.

+ Creation of custom Splunk Apps and Add-ons to provide necessary data collection, alert actions, or custom search commands.

+ Optimize SIEM queries, alerts, and dashboards to ensure cost effective resource usage.

+ Manage day to day administration and management of event collection systems and SIEM.

**What we’re looking for**

_Must-haves_

+ Four-year undergraduate degree in Computer Science, equivalent technical degree, or demonstrable experience.

+ Minimum three years of Splunk Enterprise Administration and Knowledge Management experience in a multi-terabyte deployment including Splunk Enterprise Security.

+ Minimum two years of Python scripting experience.

+ Experience using Cribl to ingest data

+ Ability to communicate effectively with all levels of an organization from engineering, operations, and management.

+ Resourceful in learning and adapting to complex and dynamically changing environment.

+ Be a self-starter, able to work independently, and able to manage time effectively.

_Nice-to-haves_

+ Demonstrated experience with Splunk Cloud.

+ Demonstrated experience with the formation of Data Lakes using AWS S3 storage.

+ Demonstrated experience with one or more of Fluentd, FluentBit, Logstash, or Cribl Stream.

+ Demonstrated experience managing configuration-as-code in CICD pipeline.

+ Familiarity with Software Development Lifecycles and build pipeline automation.

+ Demonstrated experience with cloud infrastructure and networking in AWS and/or Azure.

+ Familiarity with AWS Athena, Redshift, and Glue

+ Good working knowledge and experience with ELK (Elasticsearch, Logstash, Kibana) stack.

**What’s it like to work here?**

At Lincoln Financial Group, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.

**What’s in it for YOU:**

+ A clearly defined career framework to help you successfully manage your career

+ Leadership development and virtual training opportunities

+ PTO/parental leave

+ Competitive 401K and employee benefits (fg.com/misc/HR/Recruiting/BenefitsResourcesGuide.pdf)

+ Free financial counseling, health coaching and employee assistance program

+ Tuition assistance program

+ A leadership team that prioritizes your health and well-being; offering a remote work environment and flexible work hybrid situations

+ Effective productivity/technology tools and training

**Pay Range:** $135,000-$225,000

Actual base pay could vary based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln’s total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln’s standard benefits package.

**About The Company**

Lincoln Financial Group provides advice and solutions that help people take charge of their financial lives with confidence and optimism. Today, approximately 16 million customers trust our retirement, insurance and wealth protection expertise to help address their lifestyle, savings and income goals, and guard against long-term care expenses.

Headquartered in Radnor, Pennsylvania, Lincoln Financial Group is the marketing name for Lincoln National Corporation (NYSE:LNC) and its affiliates. The company had $290 billion in end-of-period account balances net of reinsurance as of March 31, 2023.

Lincoln Financial Group is a committed corporate citizen included on major sustainability indices including the Dow Jones Sustainability Index North America and ranks among Newsweek’s Most Responsible Companies. Dedicated to diversity, equity and inclusion, we are included on transparency benchmarking tools such as the Corporate Equality Index, the Disability Equality Index and the Bloomberg Gender-Equality Index. Committed to providing our employees with flexible work arrangements, we were named to FlexJobs’ list of the Top 100 Companies to Watch for Remote Jobs in 2022. With a long and rich legacy of acting ethically, telling the truth and speaking up for what is right, Lincoln was recognized as one of Ethisphere’s 2022 World’s Most Ethical Companies®. We create opportunities for early career talent through our intern development program, which ranks among WayUp and Yello’s annual list of Top 100 Internship Programs.

Lincoln is committed to creating a diverse and inclusive (fg.com/public/aboutus/companyoverview/diversityinclusion?audience\_page\_id=1422918942386) environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Follow us on Facebook (acebook.com/lincolnfinancialgroup) , Twitter (witter.com/lincolnfingroup) , LinkedIn (inkedin.com/company/4307?trkInfo=tas%3Alincoln+financial%2Cidx%3A3-1-3&trk=tyah) , and Instagram (nstagram.com/lincolnfingroup/) . Sign up for email alerts at fg.com

**Be Aware of Fraudulent Recruiting Activities**

If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.

Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at [email protected] if you encounter a recruiter or see a job opportunity that seems suspicious.

**Additional Information**

This position may be subject to Lincoln’s Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln’s current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.

Any unsolicited resumes/candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial Group are considered property of Lincoln Financial Group and are not subject to payment of agency fees.

Lincoln Financial Group (“LFG”) is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling 260-455-2558.

This Employer Participates in E-Verify. See the E-Verify (-verify.gov) notices.

Este Empleador Participa en E-Verify. Ver el E-Verify (-verify.gov/es) avisos.

Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.