Senior Cyber Platform Operations Engineer

State Street; Austin (TX); On-site; USD 120,000 - 202,500; Full time

Job summary

State Street is seeking a Sr. Platform Operations Engineer for its CyberDNA team in Austin to lead the day‑to‑day operations of enterprise cybersecurity, SIEM, observability, log management, and data platforms.

You will drive improvements, mentor global teams, and partner with Cyber Security, Infrastructure, and Cloud Engineering. The role emphasizes hands‑on platform support, incident handling, change management, and reporting of operational metrics in a large enterprise environment with tools

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.
• 10+ years of technology infrastructure, platform engineering, security operations, or enterprise monitoring experience.
• 5+ years of technical leadership experience in a large enterprise environment.
• Experience with cloud, DevOps, Splunk, observability, SIEM, security operations, or data platform technologies.
• Relevant certifications preferred, such as AWS, Splunk, ITIL, CISSP, or related technology/security certifications.

Responsibilities

• Lead the support, administration, reliability, and day‑to‑day operations of enterprise cybersecurity, SIEM, observability, log management, and data platforms.
• Support the operational roadmap for cybersecurity platform capabilities, including SIEM operations, detection support, observability, log monitoring, data ingestion, and reporting across the organization.
• Support platform modernization and operational improvement initiatives across cybersecurity platforms, SIEM technologies, observability solutions, log management capabilities, and security operations tooling.
• Provide technical leadership and mentorship for global support teams responsible for enterprise cybersecurity platforms, SIEM technologies, observability solutions, log management platforms, data ingestion pipelines, and operational analytics capabilities, including tools such as Splunk, Enterprise Security, Elastic Search, Cribl, Databricks, and similar security operations platforms.
• Manage and support enterprise SIEM and cybersecurity platform components, including search, indexing, clustering, data management, platform integrations, and operational support functions across tools such as Splunk, Elastic Search, and other SIEM technologies.
• Administer and optimize SIEM and security operations capabilities to support security monitoring, threat detection, alert triage, notable event management, and incident investigation requirements across enterprise cybersecurity platforms.
• Optimize platform operations by using monitoring alerts, performance trends, service metrics, and operational insights to improve reliability, reduce recurring issues, lower technical debt, and strengthen service resiliency.
• Lead platform upgrades, migrations, modernization initiatives, and service improvement programs.
• Support enterprise log pipeline and telemetry management platforms, including tools such as Cribl, by monitoring data flow, troubleshooting routing or filtering issues, validating service health, and coordinating issue resolution with application and infrastructure teams.
• Support integration of security and operational telemetry into Databricks Data Lake environments for analytics, reporting, and long‑term data retention.
• Monitor ingestion health, data quality, storage utilization, platform performance, and service availability across SIEM, log management, telemetry pipeline, and data platform environments.
• Partner with Cyber Security, Infrastructure, Cloud Engineering, Application, and Service Management teams to support production issues, troubleshoot platform events, coordinate change activities, and deliver stable operational outcomes.
• Hands‑on experience with Anvilogic and Crogl or similar SIEM detection engineering platforms for detection engineering, SIEM use case development, alert workflow support, and threat detection operations.
• Improve operational support workflows for alerting, monitoring, telemetry pipeline health, incident response, and observability use cases to reduce manual effort and improve service reliability.
• Lead incident response, root cause analysis, problem management, change execution, and continuous improvement activities.
• Define, implement, and continuously improve operational standards, governance, documentation, monitoring procedures, SOPs, and support models aligned to ITIL, change management, and Log Telemetry Monitoring control requirements, while measuring success through operational metrics and service performance indicators.
• Ensure compliance with enterprise security, audit, regulatory, and data lifecycle management requirements.
• Mentor engineers, coordinate global support teams, manage vendor engagement, and contribute to strategic technology planning.

Skills

SIEM operations

Linux/Unix

Python scripting

Cloud AWS

Incident response

ITIL

Education

Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field

Tools

Splunk

QRadar

Elastic Search

Cribl

Databricks

Cribl Stream

Job description

State Street is seeking a Sr. Platform Operations Engineer for its CyberDNA team in Austin to lead the day‑to‑day operations of enterprise cybersecurity, SIEM, observability, log management, and data platforms.

You will drive improvements, mentor global teams, and partner with Cyber Security, Infrastructure, and Cloud Engineering. The role emphasizes hands‑on platform support, incident handling, change management, and reporting of operational metrics in a large enterprise environment with tools