Platform Operations Engineer , Assistant Vice president

State Street; Kilkenny; On-site; EUR 90,000 - 130,000; Full time

Job summary

State Street is seeking a Platform Operations Engineer for its CyberDNA team in Ireland. This role focuses on administering and sustaining enterprise cybersecurity platforms, including SIEM, AI-SOC, and data lakehouse components, to ensure reliability and security across the organization.

You will collaborate with Global Cyber Security, Infrastructure, and Enterprise Continuity, supporting incident response, platform health, and governance in a regulated environment.

Qualifications

• Bachelor's degree or higher in a relevant field.
• Advanced knowledge of enterprise cybersecurity platforms.

Responsibilities

• Support administration and reliability of enterprise cybersecurity platforms (SIEM, AI-SOC, telemetry routing, Security Lakehouse).
• Ensure platform reliability, availability, performance, and operational readiness through monitoring and incident management.
• Support cybersecurity teams across Detection Engineering, Threat Intelligence, Threat Hunting, Forensics, and SOC operations.
• Maintain platforms like Splunk, Enterprise Security, Cribl, Databricks, Elastic, and related technologies.
• Assist platform upgrades, migrations, modernization, and operational transformation programs.
• Monitor major incidents, root cause analysis, and change execution activities.
• Oversee telemetry ingestion, data quality, storage utilization, and service performance.
• Maintain SOPs, governance, ITIL-aligned processes, and change management controls.
• Ensure compliance with cybersecurity, audit, regulatory, and operational requirements.
• Drive continuous improvement and measure success with operational metrics.
• Provide 24x7x365 on-call support across distributed teams.

Skills

Security monitoring and incident

Threat detection

Cross-team collaboration

Automation scripting

Cloud infrastructure knowledge

ITIL processes

Stakeholder management

Strong communication

Education

Bachelor's degree in CS/Engineering/IS

5+ years platform engineering experience

3+ years cloud (AWS/Azure/OCI) & DevOps

5+ years SIEM platform experience (Splunk/Datadog/QRadar/Elastic/Cribl/Databricks/AI-SOC)

Relevant certifications (AWS/Splunk/ITIL/CISSP)

Tools

Splunk

QRadar

Elastic

Cribl Stream

Databricks

Job description

Who We Are Looking For

State Street's Cyber Data & Analytics (CyberDNA) team is seeking a Platform Operations Engineer to help shape the next generation of cybersecurity data, analytics, and AI-powered platforms. Partnering closely with Global Cyber Security, Infrastructure Teams, and Enterprise Continuity Services, this team develops advanced data platforms, intelligent automation solutions, and engineering capabilities that enable cybersecurity teams to make faster, data‑driven decisions and strengthen the firm's ability to detect, prevent, and respond to evolving cyber threats. Through innovation in AI, analytics, and automation, CyberDNA plays a critical role in protecting State Street, its clients, and its partners from increasingly sophisticated global threat actors.

The successful candidate will bring a strong interest in platform operations, hands‑on technical support, and a willingness to learn enterprise cybersecurity technologies, including SIEM, AI‑SOC, data routing, and Security Lakehouse platforms. This role will support the day‑to‑day monitoring, troubleshooting, incident response, change activities, and platform administration needed to maintain service stability, availability, and reliability. Success requires a foundational understanding of production support, IT service management, operational procedures, documentation, and continuous improvement in a regulated enterprise environment.

What You Will Be Responsible For

• Support the administration, reliability, and day‑to‑day operations of enterprise platform administration for enterprise cybersecurity technologies, including SIEM, AI‑SOC, telemetry routing, and Security Lakehouse platforms.
• Support platform reliability, availability, performance, and operational readiness through proactive monitoring, incident management, and continuous improvement.
• Support cybersecurity teams including Detection Engineering, Threat Intelligence, Threat Hunting, Forensics, and SOC/Cyber Defense operations.
• Support platforms such as Splunk, Enterprise Security, Cribl, Databricks, Elastic, and other cybersecurity analytics technologies.
• Support platform upgrades, migrations, modernization initiatives, and operational transformation programs.
• Monitor and support major incident response, root cause analysis, problem management, and change execution activities.
• Monitor and support platform health, telemetry ingestion, data quality, storage utilization, and service performance across cybersecurity data platforms.
• Support and maintain operational standards, governance, SOPs, monitoring procedures, and ITIL‑aligned support processes.
• Support compliance with cybersecurity, audit, regulatory, and operational control requirements.
• Support continuously improve operational standards, governance, documentation, monitoring procedures, SOPs, and support models aligned to ITIL, change management, and Log Telemetry Monitoring control requirements, while measuring success through operational metrics and service performance indicators.
• Provide 24x7x365 operational support through an on‑call rotation, collaborating with globally distributed engineering and operations teams to maintain platform reliability and service continuity.

What We Value

• Strong experience administering and supporting enterprise‑scale cyber security platforms including technologies such as Splunk, QRadar, Elastic, and similar security operations solutions.
• Deep understanding of security monitoring, threat detection, incident response, correlation searches, notable event management, data models, and risk‑based alerting methodologies.
• Hands‑on expertise to support telemetry and data pipeline solutions such as Cribl Stream, including data routing, transformation, filtering, enrichment, and optimization of machine data at scale.
• Experience integrating security and operational telemetry into Databricks or similar data lakehouse platforms to support advanced analytics, reporting, machine learning, and AI‑driven use cases.
• Strong knowledge of cloud‑based infrastructure and platform operations, preferably on AWS & Azure, combined with solid Linux/Unix administration, troubleshooting, and performance tuning skills.
• Proficiency in scripting, automation, and version control practices to improve operational efficiency, automate repetitive tasks, enhance monitoring capabilities, and increase platform reliability.
• Working knowledge of ServiceNow, Jira, and Confluence, with experience supporting incident, problem, change, service request, Agile delivery, and technical documentation processes.
• Solid understanding of ITIL principles, operational best practices, service management disciplines, governance frameworks, and compliance requirements in a large enterprise environment.
• Exceptional communication and stakeholder management skills, with the ability to effectively communicate technical concepts and operational risks to both technical and non‑technical audiences.
• Strong organizational and collaboration skills, with the ability to coordinate across geographically distributed teams, manage competing priorities, and successfully drive operational outcomes.
• Experience supporting highly available, mission‑critical platforms within complex enterprise environments, demonstrating a strong commitment to operational excellence, resiliency, and continuous improvement.
• Ability to thrive in a fast‑paced, global operations environment while maintaining a strong customer focus and driving high‑quality service delivery.

Education & Preferred Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.
• 5+ years of platform engineering and platform/infrastructure operations experience.
• 3+ years of experience with public cloud (AWS, Azure, OCI) & DevOps and ability to manage cloud‑native platforms.
• 5+ years of experience in supporting SIEM platforms like Splunk, Datadog, Qradar, Elastic, Cribl, Databricks, and AI‑SOC solutions.
• Relevant certifications preferred, such as AWS, Splunk, ITIL, CISSP, or related technology/security certifications.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work‑life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Job ID: R-794032