Security Data Platform Engineer (Splunk Cloud & Cribl)

Moody's Corporation; Greater London; On-site; GBP 38,000 - 61,000; Full time

Benefits offered by this job

Medical

Personal Accident

Life Insurance

Time Off

Job summary

Moody's Corporation is seeking a Cybersecurity Data Platform Engineer to lead the security data platform initiatives across Splunk Cloud and Cribl Cloud environments in a global enterprise. You will design, implement, and optimize data ingestion, parsing, and enrichment workflows while collaborating with security stakeholders to ensure high data quality and risk visibility.

The role emphasizes automation in Python/JavaScript, cloud experience (AWS), and a strong foundation in AI-assisted

Qualifications

• 2-4 years of experience in cybersecurity engineering, data engineering, or platform administration with hands‑on expertise in security data platforms
• Strong experience administering Splunk Cloud environments, including data models, field extractions, knowledge objects, indexing strategy, permissions management, and search processing
• Direct experience with Cribl Stream and Cribl Cloud for data ingestion, transformation, routing, reduction, and delivery across multiple destinations
• Deep understanding of log formats, parsing, normalization, and data enrichment practices, including experience with CIM mapping
• Proficiency in Python and/or JavaScript to develop automation, integrations, operational tooling, and platform enhancements
• Experience supporting cloud-hosted environments, preferably within AWS infrastructure
• Strong analytical and troubleshooting skills with the ability to diagnose and resolve issues across complex distributed data pipelines
• Demonstrated proficiency in AI concepts, with hands‑on experience using AI tools to streamline workflows and enhance operational efficiency; awareness of AI risk management and responsible AI use

Responsibilities

• Serve as the subject matter expert for security data platforms, ensuring reliable, scalable, and optimized data collection, transformation, and delivery across the cybersecurity ecosystem
• Administer, configure, and optimize Splunk Cloud environments, including indexes, data models, field extractions, permissions, and licensing utilization
• Manage Cribl Cloud configurations and pipelines to support secure and efficient data ingestion, transformation, routing, and reduction
• Design and implement onboarding processes for new data sources, ensuring accurate parsing, normalization, enrichment, and quality validation
• Build and maintain transformations and processing pipelines that support detection engineering, dashboards, reporting, audit, and compliance requirements
• Partner with cybersecurity stakeholders to ensure security data is complete, reliable, and aligned with operational and investigative needs
• Troubleshoot and resolve ingestion issues, data gaps, latency concerns, and pipeline failures across source systems and platform components
• Monitor platform health, performance metrics, ingest volumes, and cost trends while identifying opportunities for optimization and efficiency improvements
• Develop automation and operational tooling using Python and JavaScript, maintain platform documentation, and support upgrades, migrations, and capacity planning initiatives

Skills

Splunk Cloud administration

Cribl Cloud

Log parsing & enrichment

Python

JavaScript

AWS

AI concepts

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering

Splunk certifications preferred

Tools

Splunk Cloud

Cribl Cloud

AWS

Splunk Administrator

Job description

Moody's Corporation is seeking a Cybersecurity Data Platform Engineer to lead the security data platform initiatives across Splunk Cloud and Cribl Cloud environments in a global enterprise. You will design, implement, and optimize data ingestion, parsing, and enrichment workflows while collaborating with security stakeholders to ensure high data quality and risk visibility.

The role emphasizes automation in Python/JavaScript, cloud experience (AWS), and a strong foundation in AI-assisted