Security Data Solutions Engineer

State Street • Boston, MA

4d • $120,000 - $202,500 • Hybrid

About The Position

State Street’s Cyber Data & Analytics (CyberDNA) team is seeking a Security Data Solutions Engineer to develop cybersecurity data, analytics, and AI-powered solutions. The role works with Global Cyber Security, infrastructure, enterprise continuity, security operations, detection engineering, platform engineering, cloud, and application teams to build scalable security data products that support SIEM, AI-driven analytics, automation, and cyber defense.

The engineer bridges cybersecurity, data engineering, and product management. The role translates technical security telemetry requirements and cybersecurity program objectives into production-scale designs, helping teams improve threat detection, incident response, threat hunting, risk management, analytics, and regulatory reporting. It includes technical leadership for data integration and modernization initiatives, as well as influence over cybersecurity data platforms, engineering processes, and analytics capabilities.

The position is hybrid, with an in-office presence of 2–4 days per week. The work shift is 8 AM–5 PM local time, with occasional Level 3 escalation resolution to support operational incidents.

Requirements

• Bachelor’s degree in computer science, cybersecurity, information technology, engineering, data engineering, information systems, or a related technical discipline.
• 8+ years of experience in cybersecurity, data engineering, AI/ML, security analytics, SIEM engineering, product design, or related technical fields.
• 5+ years of hands-on experience designing and implementing enterprise-scale data products, data lakes, Lakehouse, and data warehouse solutions.
• Advanced expertise in Python, SQL, Spark, Kafka, Databricks, Snowflake, Splunk, and cloud-native data platforms to design, build, and optimize scalable batch and real-time data pipelines.
• Demonstrated experience managing complex cybersecurity data integration programs and stakeholder requirements.
• Hands-on experience with SIEM platforms and the data onboarding, normalization, and operational processes needed to support them.
• Strong understanding of data modeling, data architecture, APIs, event streaming, cloud-native services, and modern analytics platforms.
• Familiarity with cybersecurity frameworks including NIST CSF, MITRE ATT&CK, CIS Controls, and Zero Trust architectures.
• Deep understanding of SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, Chronicle, or similar technologies.
• Proven experience designing data-driven solutions using technologies such as Databricks, Snowflake, Kafka, Spark, and logging agents such as Cribl, OpenTelemetry, FluentBit, or equivalent platforms.
• Hands-on experience and strong understanding of data engineering concepts including ETL/ELT, streaming pipelines, data lakes, data warehouses, and data governance.
• Hands-on experience developing, validating, and deploying machine-learning models and scalable data pipelines in production environments.
• Strong knowledge of cybersecurity telemetry, log management, event correlation, data normalization, enrichment, and detection engineering requirements.
• Demonstrated product management experience, including developing roadmaps, prioritizing features, defining business value, and managing stakeholder expectations.
• Experience with cloud-native architectures across AWS, Azure, and Google Cloud environments.
• Ability to analyze complex problems, evaluate trade-offs, and recommend pragmatic solutions that balance business and technical requirements.
• Strong understanding of cybersecurity use cases including incident response, threat detection, threat hunting, vulnerability management, identity security, and cloud security.
• Experience working within Agile, DevSecOps, and product-driven delivery models.
• Exceptional communication, collaboration, and stakeholder management skills.
• Ability to influence technical and business leaders across multiple organizations.

Nice To Haves

• Master’s degree in computer science, cybersecurity, engineering, data science, business administration, or a related discipline.
• Industry certifications such as CISSP, CISM, CCSP, Splunk Certified Architect, Splunk Certified Consultant, Microsoft Security Certifications, AWS Certifications, Databricks Certifications, or equivalent.
• Experience delivering cybersecurity data products within highly regulated industries such as financial services, healthcare, or critical infrastructure.
• Experience supporting AI/ML, Security Lakehouse, Agentic AI, Security Copilot, or advanced cyber analytics initiatives.

Responsibilities

• Serve as the subject matter expert for security data solutions supporting SIEM, security analytics, detection engineering, threat hunting, and AI-enabled cybersecurity use cases.
• Partner with cybersecurity stakeholders to define data requirements, success criteria, onboarding priorities, roadmaps, and measurable outcomes for security data products.
• Design and implement enterprise-scale security telemetry solutions for on-premises, cloud, SaaS, and hybrid environments.
• Analyze source systems, log schemas, metadata requirements, retention needs, and downstream analytics requirements to define onboarding and normalization strategies.
• Design workflows for onboarding security data from applications, cloud platforms, identity systems, infrastructure, network devices, databases, endpoints, and security tools.
• Design scalable ingestion, routing, transformation, enrichment, normalization, and validation patterns for SIEM and cybersecurity data platforms.
• Ensure security telemetry meets requirements for quality, completeness, timeliness, consistency, governance, and operational reliability.
• Collaborate with architects, engineers, and product managers to prioritize capabilities and deliver solutions aligned with cybersecurity and business objectives.
• Work with product managers to define product roadmaps, feature requirements, user stories, acceptance criteria, and delivery milestones for security data initiatives.
• Lead cross-functional workshops with business and technical stakeholders to identify opportunities to improve cybersecurity visibility and operational efficiency.
• Establish data quality metrics, service-level objectives, operational KPIs, and data and process governance controls for security data products.
• Spearhead AI, automation, and self-service workflow capabilities that improve cybersecurity outcomes and reduce operational effort.
• Influence the strategic direction of cybersecurity data platforms, data engineering processes, and analytics capabilities.
• Provide technical leadership for complex cybersecurity data integration and modernization initiatives.
• Occasionally resolve Level 3 escalations to support operational incidents.

Benefits

• Retirement savings plan (401K) with company match.
• Insurance coverage including basic life, medical, dental, vision, long-term disability, and optional additional coverages.
• Paid time off, including vacation, sick leave, short-term disability, and family care responsibilities.
• Employee Assistance Program.
• Incentive compensation, including eligibility for annual performance-based awards, with exclusions for certain sales roles.
• Eligibility for certain tax-advantaged savings plans.
• Flexible Work Program.
• Development programs and educational support.
• Paid volunteer days.
• Matching gift program.
• Employee networks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior