Cybersecurity Platform Engineer

State Street • Atlanta, GA

2d • $150,000 - $230,000 • Hybrid

About The Position

Cybersecurity Platform Engineer (State Street Financial Services, Inc.; Atlanta, GA): Will serve as a technical expert for product engineering and service support for critical enterprise security technologies of the Company’s Information Security Services. Primarily entails hands on technical product design and deployment specifically for building and managing SIEM platforms like Splunk Enterprise, Splunk User Behavior Analytics, Splunk Phantom, Splunk Enterprise Security and ArcSight. You will also be a mentor to junior staff members, both on-shore and off-shore, to develop their skills in SIEM platforms. Specific duties include: Engineering, implementing and administering SIEM platforms ArcSight, Splunk Enterprise, Splunk Enterprise Security, Splunk UBA and Splunk Phantom in public cloud and on-premise datacenters; Analyzing, designing, building and supporting Splunk Multi-Cluster Architecture and maintaining existing ArcSight infrastructure; Incident and Problem Management, Change and Release Management, Vendor Management, Capacity Management functions for these applications; Overseeing production support of the platforms by the service provider who will provide 24X7 monitoring and maintenance of the platforms; Product architecture, engineering and roadmap and Infrastructure Services for platforms supported by Security Analytics team; Performing integration to connect with 3rd party software; Assisting the content engineering team in developing security-focused content threat detection logic and operational dashboards in Splunk; and Lead a team of engineers & analysts to build, maintain and support data platforms like Splunk Enterprise, Enterprise Security, Splunk Phantom/Soar, UBA and emerging platforms driven by Cyber Security requirements. Less than 5% domestic travel. Hybrid telecommuting permitted pursuant to Company policy.

Requirements

• Bachelor’s degree or equivalent in Computer Science, Engineering, Information Technology, Cybersecurity or related field
• 10 years of experience in Security Engineering, System Administration, Database Administration, Network Engineering, or Software Engineering with a concentration in Cybersecurity
• 10 years of IT engineering experience in building and managing infrastructure and security platforms
• 7 years of professional engineering experience with the Splunk platform
• Minimum 4 full life cycle implementations of Splunk Enterprise
• 3 years of DevOps Engineering experience
• At least 2 of the following certifications: CISSP, Splunk Certified Consultant, Enterprise Security Implementation or Splunk Certified Architect
• Experienced with Splunk’s multiple deployment options – including on premise distributed deployments and public cloud
• Expert-level experience with SIEM technologies - implementation, tuning, troubleshooting
• Expertise in building, deploying, scaling, and troubleshooting the various facets of large scale Splunk clusters and supporting apps
• Knowledge of scripting languages such as Python, Perl, bash
• Experience in implementing, architecting and administering Splunk Enterprise Security, UBA and Splunk Phantom
• Solid ability to Maintain, Manage and Monitor Splunk Infrastructure
• Demonstrated experience in clustering and load balance Environments setup
• Expertise in writing Splunk queries in Splunk Programming Language (SPL) and data ingestion, normalization
• Demonstrated understanding of Splunk APIs and SDK
• Demonstrated experience developing in XML, Bash, JavaScript and Python, Perl, PowerShell scripts
• Knowledge of or experience managing Security solutions like DLP, ZScaler, Palo Alto, Symantec solutions, McAfee, or Active directory

Responsibilities

• Engineering, implementing and administering SIEM platforms ArcSight, Splunk Enterprise, Splunk Enterprise Security, Splunk UBA and Splunk Phantom in public cloud and on-premise datacenters
• Analyzing, designing, building and supporting Splunk Multi-Cluster Architecture and maintaining existing ArcSight infrastructure
• Incident and Problem Management, Change and Release Management, Vendor Management, Capacity Management functions for these applications
• Overseeing production support of the platforms by the service provider who will provide 24X7 monitoring and maintenance of the platforms
• Product architecture, engineering and roadmap and Infrastructure Services for platforms supported by Security Analytics team
• Performing integration to connect with 3rd party software
• Assisting the content engineering team in developing security-focused content threat detection logic and operational dashboards in Splunk
• Lead a team of engineers & analysts to build, maintain and support data platforms like Splunk Enterprise, Enterprise Security, Splunk Phantom/Soar, UBA and emerging platforms driven by Cyber Security requirements

Benefits

• Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees