Splunk Admin

Splunk AdminLocation: Seattle, WAHire Type: ContractDuration: 4+ MonthsObservability Engineer - SIEM Observability Engineer, Enterprise EngineeringOur overall purpose is to elevate the world through the power of practice. We are proud to be a growing global company with locations all around the world. We owe our success to our innovative product, our emphasis on our stores, our commitment to our people, and the incredible connections we get to make in every community we are in.About this team: We are looking for a motivated engineer to become a core member of the Observability team in Enterprise Engineering, guiding the enterprise organization to improve the practice of observability here at Lululemon. We are a consultative enablement team providing guidance and support to product engineering teams for the development of high-quality and resilient software systems through the use of monitoring tools and best practices. As a SIEM Engineer for Observability, your team works with the Tech Security and Compliance team to establish and build upon best practices with the security platforms through event & logging management to provide total visibility into our systems. This role requires someone who can help LLL to get most value from our investment, implement and refine governance practices, as well as handling hands on admin tasks support across a disparate organization.As a successful candidate for this role, you will support our lead engineers to administer our tools, enable our end users, be a custodian for best practices and standards, and work with vendor TAMs, to resolve issues and learn about new capabilities and opportunities.A day in the life:Support users with Getting Data In (GDI) including data classification and data transfer to the logging aggregation tool(s) that fit the use case for security and SIEM or observabilityMaintain and install Splunk Technical Addons needed for GDI Log pipeline implementation and maintenance, including data ETL or minimization, obfuscation, log to metrics, etcEnforce best practices and strategies for teams to integrate with Tech Security and Compliance guidelinesTool Governance and Best Practices documentationUnderstand our end users needs to ensure our platforms meet their needsCollaborate with cross-functional teams to troubleshoot and resolve monitoring related issuesWork with Enterprise Engineering platform administration to support Observability platform healthQualifications:College degree in computer science/engineering or related fieldMinimum 2+ years of experience with security platforms, specifically Cloud SIEM, Application Security Management, Security Posture ManagementGDI (Getting Data In) specialization: onboarding data through data classification, pipelining/ETL, data models & summarization (where applicable)Good working knowledge of the Splunk Common Information Model, and data model accelerationStrong knowledge of SPL, especially as it relates to correlation searches for notable eventsKnowledge of: PII / CCPA / GDPR rules data transformationExperience with Linux log/event sources as they relate to security use cases (infrastructure, application, platform, audit trails, etc)A track record delivering quality results on complex cross-functional projectsAnalytical and problem-solving capabilitiesStrong verbal and written communication skills. Must be able to communicate with a wide variety of audiences, both business and technicalBonus Experience with other security tools such as Datadog, Splunk ES, Sentinel, Prisma, etcExperience with data transformation and pipeline tools such as Splunk Edge Processor, Cribl, Datadog Observability Pipelines, etc.Experience/knowledge of Cloud Computing services (AWS, Azure, GCP), and monitoring and logging tools within these platformsKnowledge of OpenTelemetry, experience with OpenTelemetry API/SDKInterpersonal Must Haves:Acknowledges the presence of choice in every moment and takes personal responsibility for their lifePossesses an entrepreneurial spirit and continuously innovates to achieve great resultsCommunicates with honesty and kindness, and creates the space for others to do the sameLeads with courage, knowing the possibility of greatness is bigger than the fear of failureFosters connection by putting people first and building trusting relationshipsIntegrates fun and joy as a way of being and working, aka doesn't take themselves too seriously