Director, Splunk Platform Engineering & SRE

BNY•New York, NY

1d•Onsite

About The Position

BNY Mellon is a leading global financial services company seeking a Director, Splunk Platform Engineering & SRE (Individual Contributor) to join their Cybersecurity Engineering Tools & Platforms team. This is a high-impact, deeply technical leadership role for a top-tier engineer, not a people manager. The Director title signifies the depth of technical expertise, ownership, and influence required. The role involves taking ownership of a large-scale, mission-critical Splunk platform central to enterprise observability and cybersecurity. It requires deep technical expertise across the stack, including OS, network, ingestion pipelines, and distributed systems, with a focus on resolving complex issues at their root. This position is ideal for an engineer who thrives on solving unpredictable system failures.

Requirements

Deep, hands-on expertise in Splunk platform engineering and large-scale SIEM environments
Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred.
12+ years of experience in information security or related technology experience required
Strong foundation in Site Reliability Engineering (SRE) and distributed systems
Proven ability to debug and resolve complex issues across the full stack, from application to OS and network layers
Expert knowledge of Linux/Unix systems, including performance tuning and low-level troubleshooting
Strong understanding of networking fundamentals (TCP/IP, packet analysis, syslog pipelines, latency debugging)
Experience building and operating high-volume data ingestion and processing systems
Proficiency in Splunk SPL, and data analysis
Strong programming/scripting skills (e.g., Python, Go, Java, or similar)
Hands-on experience with DevOps and configuration management tools (Ansible, Git, etc.)
Experience with Kubernetes and containerized environments
Deep understanding of security models, RBAC, and enterprise controls
Ability to operate independently in high-pressure situations and take full ownership of outcomes
A mindset focused on automation, scalability, and eliminating operational friction
Technical in depth and hands-on A.I. literacy as well as knowledge of MCP design

Nice To Haves

Experience in the securities or financial services industry is a plus.

Responsibilities

Own end-to-end engineering and operational accountability for the enterprise Splunk platform (SIEM), including architecture, capacity planning, ingestion, integrations, and lifecycle management
Act as the highest technical escalation point, driving resolution of critical incidents across application, platforms, and infrastructure layers
Troubleshoot and resolve deep, low-level technical issues, including Linux/Unix OS internals, network behavior, and distributed system failures
Drive platform reliability, capacity, observability, and performance engineering, using modern monitoring stacks
Architect and scale high-throughput ingestion pipelines, integrating various systems like Syslog, Kubernetes, and cloud/enterprise systems
Own authentication, RBAC, and access control models, ensuring strong governance and compliance
Design and implement automation and configuration management frameworks (Git, Ansible) to reduce operational toil
Lead incident response, root cause analysis, and systemic fixes, embedding SRE principles (SLAs, SLOs, error budgets)
Drive platform upgrades, resilience strategies, and disaster recovery readiness
Evaluate and onboard emerging technologies, including AI/ML-driven analytics and contextual data platforms
Create bespoke solutions for unsolved problems using languages like Python, Java, or Golang
Influence engineering direction across teams through technical leadership and expertise as an individual contributor
Mentor and elevate engineers through hands-on guidance and technical depth