Are you curious to learn? Are you interested in working on meaningful projects? Do you want to work with cutting-edge technology? Are you interested in being part of a team that is working to transform and do things differently? If so, LPL Financial is the place for you!
Job Overview:
The Senior Splunk Engineer will manage a Splunk Cloud environment, multiple search heads, deployment server, heavy forwarders and universal forwarders. The Sr Information Security Engineer will be responsible for maintaining a reliable Splunk environment. They will monitor system performance, application functionality and license usage and are responsible for communicating needed changes to the Splunk environment, such as license increases, hardware modifications, and new technologies to enhance availability to the customer.
The Senior Splunk Engineer will be a key member of the SIEM and Splunk Engineering team ensuring maximum availability of the Splunk cloud environment and providing technical support and expertise to LPL’s Cyber Security Operations Center. This role is responsible for Splunk administration support and maintenance, data onboarding, tool deployments and advanced content development.
Responsibilities:
- Provide thought support and execution for all design, implementation, and maintenance activities related to the SIEM platform.
- Linux/Windows and Splunk server administration, including upgrades of Universal Forwarders, Heavy Forwarders and Deployment Servers.
- Monitor and maintain Splunk performance, availability, and capacity
- Perform data ingestion and data visualization for Splunk and Splunk Enterprise Security Suite
- Provide proficient knowledge of recognizing and onboarding new data sources into Splunk, analyzing the data for parsing purposes to make it CIM compliant, then building use cases to fulfill stakeholder requirements.
- Develop reliable, efficient queries that will feed custom alerts and dashboards
- Build and integrate contextual data into the notable events and workflow within Splunk Enterprise Security Suite
- Assist users of Splunk in designing and maintaining production-quality searches, dashboards and alerts
- Develop automation and scripts to drive efficiencies in the SOC
- Recommend and assist in technology evaluations and implementations.
- Develop and Implement Apps & Knowledge Objects (KO) like Dashboard, Reports, Data Models upon request of customers
- Create and update documentation and playbooks
- Work with application owners to understand and document current logging stances
- Work with application owners to develop CIM compliant logging where it does not currently exist
- On-call support as needed.
- Develop good working relationships with customers and other stakeholders, and provide advice and assistance to stakeholders on Splunk related issues
Requirements:
- 5+ years of information security applications and systems experience
- 2+ years of Splunk SIEM experience and the Enterprise Security Application
- 2 + years of Regular Expression (regex) experience
- Excellent technical writing and documentation skills
- Experience with multiple operating systems to include Windows and Unix/Linux
Preferences:
- Splunk Certified Admin is preferred.
- Expertise in automation using scripting tools like PowerShell, Python or Bash
#LI-PA
Pay Range:
$97,725-$162,875/year
Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more. Your recruiter will be happy to discuss all that LPL has to offer!
Company Overview:
LPL Financial Holdings Inc. (Nasdaq: LPLA) was founded on the principle that the firm should work for advisors and institutions, and not the other way around. Today, LPL is a leader in the markets we serve, serving more than 23,000 financial advisors, including advisors at approximately 1,000 institutions and at approximately 580 registered investment advisor ("RIA") firms nationwide. We are steadfast in our commitment to the advisor-mediated model and the belief that Americans deserve access to personalized guidance from a financial professional.
At LPL, independence means that advisors and institution leaders have the freedom they deserve to choose the business model, services, and technology resources that allow them to run a thriving business. They have the flexibility to do business their way. And they have the freedom to manage their client relationships, because they know their clients best. Simply put, we take care of our advisors and institutions, so they can take care of their clients.
Join LPL Financial: Where Your Potential Meets Opportunity
At LPL Financial, we believe that everyone deserves objective financial guidance. As the nation’s leading independent broker-dealer, we offer an integrated platform of cutting-edge technology, brokerage, and investment advisor services.
Why LPL?
- Innovative Environment: We foster creativity and growth, providing a supportive and responsive leadership team. Learn more about our leadership team here!
- Limitless Career Potential: Your career at LPL has no limits, only amazing potential. Learn more about our careers here!
- Unified Mission: We are one team on one mission—taking care of our advisors so they can take care of their clients. Learn more about our mission and values here!
- Impactful Work: Our size is just right for you to make a real impact. Learn more here!
- Commitment to Equality: We support workplace equality and embrace diverse perspectives and backgrounds. Learn more here!
- Community Focus: We care for our communities and encourage our employees to do the same. Learn more here!
- Benefits and Total Rewards: Our Total Rewards package goes beyond just compensation and insurance. It includes a mix of traditional and unique benefits, perks, and resources designed to enhance your life both at work and at home. Learn more here!
Join the LPL team and help us make a difference by turning life’s aspirations into financial realities. Please log in or create an account to apply to this position. Principals only. EOE.
Information on Interviews:
LPL will only communicate with a job applicant directly from an @lplfinancial.com email address and will never conduct an interview online or in a chatroom forum. During an interview, LPL will not request any form of payment from the applicant, or information regarding an applicant’s bank or credit card. Should you have any questions regarding the application process, please contact LPL’s Human Resources Solutions Center at (855) 575-6947.
EAC1.22.25