Splunk Jobs in Naperville, IL (NOW HIRING)

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

AbbVie Information Security is looking for a highly motivated, experienced, and skilled specialist to join the Data Security team. AbbVie’s Data Security team empowers AbbVie workforce to confidently create and collaborate on life changing medicines while minimizing unauthorized distribution and misuse. The Data Security team is a function within the larger Information Security organization. Join us as Senior Data Loss Prevention Analyst to support and improve our efforts to protect AbbVie sensitive data from insider risks.

This position can be virtual anywhere in the U.S.

The Senior Data Loss Prevention (DLP) Analyst will lead efforts to identify, develop, and implement data security controls and mitigation capabilities across a variety of infrastructure technologies including endpoint, network, and cloud services. The Senior Analyst will collaborate with infrastructure and application teams to gain an understanding of technology capabilities and advise them on mechanisms to mitigate insider risk activity while enabling collaboration.

The ideal candidate will have broad experience and knowledge of technology systems, applications, and networks along with the potential proactive or reactive controls that can be used to enhance the protection of data. They will have the ability to research and communicate technical concepts and configurations to a variety of stakeholders.

Responsibilities:

• Lead complex and sensitive data loss investigations from initial alert through documentation and closure, including cases involving potential insider risk. 
• Serve as the senior escalation point for the DLP team, providing guidance and second level review on cases requiring advanced analytical judgment. 
• Design, build, test, and tune DLP policies and detection rules in Microsoft Purview, balancing detection coverage against false positive volume. 
• Develop and maintain Splunk searches, correlation logic, dashboards, and reports to support DLP investigations, alert triage, and program metrics. 
• Continuously review the alert queue to identify tuning opportunities, detection gaps, and candidates for new use cases. 
• Correlate DLP telemetry with other data sources, endpoint, email, cloud, identity, and network logs to build complete pictures of potential data exfiltration. 
• Support the migration from the legacy DLP platform, including use-case mapping, policy translation, validation testing, and detection parity verification. 
• Partner with Legal, HR, Compliance, and Privacy on investigations requiring cross functional coordination, and prepare clear written findings for both technical and non-technical audiences. 
• Mentor junior analysts, document investigative procedures, and contribute to playbooks and runbooks that improve team consistency and efficiency. 

• Bachelor's Degree in Information Security, Computer Science or any related field and 6 years’ experience; or Master’s Degree and 5 years’ experience; or PhD and 0 years’ experience.
• Respective years of experience in information security, with demonstrated years focused specifically on data loss prevention or insider risk. 
• Hands on experience with Microsoft Purview DLP including policy creation, rule tuning, and alert investigation across endpoint, email, and cloud channels. Microsoft Purview Insider Risk Management experience is a strong plus. 
• Demonstrated Splunk experience, including writing SPL searches, building dashboards and correlation logic, and using Splunk to support security investigations. 
• Strong analytical and investigative skills, with a proven track record of working complex cases independently and reaching defensible conclusions from incomplete or ambiguous data. 
• Solid understanding of data classification, regulatory drivers (HIPAA, GDPR, PCI-DSS, or similar), and common data exfiltration methods. 
• Excellent written communication skills, with the ability to document investigative findings clearly for legal, HR, and executive audiences. 

Preferred:

• 5+ years in information security, with at least 3 years focused specifically on data loss prevention or insider risk. 

​Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future. ​
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​
• This job is eligible to participate in our short-term incentive programs. ​

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of  any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. ​

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community.  Equal Opportunity Employer/Veterans/Disabled. 

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html