Senior Cyber Data Systems Engineer

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we’ll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

Join NBCUniversal Cyber Security and help us design and implement monitoring security platforms and services that enable and protect the experience of our businesses.

This role is part of the Cyber ECS Security Data Engineering & Insights team, responsible for SIEM (logging), and data security technologies that supports the entire NBCUniversal enterprise. You'll be joining NBCUniversal at an exciting time where it is transforming from an operational, tool-based cyber defense program to an intelligence and threat-based organization, which means we're rapidly building and expanding the scope of what we ask our platforms to do. Splunk is a large part of the solution today and will continue to be so as we expand our threat intelligence and analytics capabilities by leveraging additional purpose driven tool sets.

Responsibilities:

• Provide secure design and engineering guidance for security data collection, insights and analytics including enterprise Splunk solution.
• Onboard various data elements into Splunk across NBC Universal’s business entities.
• Improve cyber monitoring of assets and resolution through Axonius responsibilities.
• Ensure uninterrupted ingestion of critical systems data into threat detection, analytics and response systems.
• Provide excellent support and service to other teams that rely on Splunk – help share knowledge, and assist in creation and management of Splunk dashboards, alerts, reports and other knowledge objects
• Facilitate knowledge sharing by creating and maintaining detailed documentation and diagrams, while also collaborating with other team members on standard processes and technology roadmaps.
• Maintain & support platform infrastructure for SIEM and endpoint product implementations.
• Participate in an on-call rotation for support of systems outside of normal business hours, and be available to perform maintenance and critical operations as needed
• Mentor Jr Engineers to help create a solid engineering team and foster excellence within the team.
• Be able to thrive in a fast-paced environment using proper organizational skills to ensure deliverables are met.

Qualifications

Basic Requirements:

• 5+ years of experience administrating a large distributed Splunk environment.
• 5+ Years of experience administrating Linux Environments
• 3+ years of experience in Python, Bash or other scripting language
• 3+ years of experience in building and securing AWS
• 3+ years of experience configuring and managing rsyslog/syslog-ng
• A deep understanding of SIEM security principles and how to apply them.
• Familiarity with large security data solutions such as AWS Security Lake, Data Bricks, Snowflake, etc.
• Experience implementing automation, pipeline, data processing, and security frameworks.
• Solid experience with Search Processing Language (SPL), creating dashboards and alerts, optimizing queries, creating field extractions, supporting Splunk tiered architecture on-prem and public cloud environments.
• Experience in Splunk app creation, including common configuration files and custom integrations using modular inputs.
• Leverage data to drive design and risk decisions using various sources and basic analytics to create clear metrics and reports.
• Highly collaborative; personally, and professional