Senior Splunk Platform Engineer, AVP

About the role

State Street's Cyber Data & Analytics (CyberDNA) team is looking for a Senior Splunk Platform Engineer (AVP) to help build the next generation of cybersecurity data, analytics and AI-powered platforms. Working with Global Cyber Security, Infrastructure Teams and Enterprise Continuity Services, the team builds data platforms and intelligent automation that let cybersecurity teams act faster and detect, prevent and respond to threats. The role covers day-to-day monitoring, troubleshooting, incident response, change activities and platform administration, with 24x7x365 on-call support.

Key responsibilities

• Administer and support enterprise cybersecurity platforms such as SIEM, AI-SOC, telemetry routing and Security Lakehouse platforms
• Maintain platform reliability, availability, performance and readiness through proactive monitoring, incident management and continuous improvement
• Support Detection Engineering, Threat Intelligence, Threat Hunting, Forensics and SOC/Cyber Defense teams
• Support platforms such as Splunk, Enterprise Security, Cribl, Databricks, Elastic and others
• Support upgrades, migrations, modernization and transformation programs
• Handle major incidents, root cause analysis, problem management and change execution
• Monitor telemetry ingestion, data quality, storage utilization and service performance
• Maintain operational standards, SOPs, monitoring procedures and ITIL-aligned processes, and ensure compliance with cybersecurity, audit and regulatory controls
• Provide 24x7x365 on-call support with globally distributed teams

Required profile

• Bachelor's degree in Computer Science, Engineering, Information Systems or a related field
• 5+ years of platform engineering and platform/infrastructure operations experience
• 3+ years of public cloud (AWS, Azure, OCI) and DevOps experience managing cloud-native platforms
• 5+ years supporting SIEM platforms such as Splunk, Datadog, QRadar, Elastic, Cribl, Databricks and AI-SOC solutions
• Relevant certifications preferred (AWS, Splunk, ITIL, CISSP)

Required skills

• Splunk, QRadar, Elastic, Cribl Stream, Databricks and SIEM platforms
• AWS and Azure, Linux/Unix administration and performance tuning
• Scripting, automation and version control
• ServiceNow, Jira and Confluence
• ITIL principles and service management