Senior Platform Operations Engineer

State Street • Boston, MA

7d • $120,000 - $202,500

About The Position

State Street's Cyber Data & Analytics (CyberDNA) team is seeking a Senior Platform Operations Engineer to support and shape cybersecurity data, analytics, and AI-powered platforms. The role partners with Global Cyber Security, Infrastructure Teams, and Enterprise Continuity Services to support platforms that help cybersecurity teams make data-driven decisions and detect, prevent, and respond to cyber threats.

This hands-on operational support leadership role is responsible for the reliability, administration, monitoring, troubleshooting, and continuous improvement of enterprise cybersecurity, SIEM, observability, log management, telemetry pipeline, and data platforms. The engineer supports production operations, incidents, users, operational readiness, change management, ITIL processes, SOPs, and service reporting in a large enterprise environment. The role also provides technical leadership and mentorship to globally distributed support teams, coordinates vendors and partner teams, and contributes to platform modernization and strategic technology planning.

Requirements

• Strong experience administering and supporting enterprise SIEM, cybersecurity, observability, and log management platforms in large-scale enterprise environments.
• Deep understanding of SIEM concepts, security monitoring operations, threat detection, incident response, notable events, correlation searches, data models, and risk-based alerting.
• Experience with log management, observability, monitoring, operational analytics, and enterprise data onboarding frameworks.
• Hands-on experience with Cribl Stream and data pipeline management, including routing, filtering, transformation, and machine data optimization.
• Experience integrating log and security telemetry into Databricks Data Lake platforms.
• Experience supporting cloud-based platforms, preferably AWS, and strong Linux/Unix administration and troubleshooting skills.
• Experience with scripting, automation, and version control practices to streamline support, improve monitoring, reduce manual effort, and enhance reliability.
• Working knowledge of ServiceNow, Jira, and Confluence for incident, problem, change, service request, Agile delivery, and technical documentation processes.
• Knowledge of ITIL processes, operational best practices, compliance requirements, and service management disciplines.
• Excellent communication, stakeholder management, and collaboration skills, including explaining technical concepts to technical and non-technical audiences.
• Ability to coordinate effectively with global teams across time zones while managing multiple priorities.
• Experience supporting mission-critical platforms in large enterprise environments with high availability and operational excellence expectations.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.
• 10+ years of technology infrastructure, platform engineering, security operations, or enterprise monitoring experience.
• 5+ years of technical leadership experience in a large enterprise environment.
• Enterprise SIEM, cybersecurity, security monitoring, log monitoring, and observability platform skills, including technologies such as Splunk, QRadar, Elastic Search, and Enterprise Security.
• Cribl data collection, routing, transformation, and optimization skills.
• Databricks Data Lake and enterprise data pipeline integration skills.
• AWS Cloud Services and Linux/Unix Administration skills.
• Python/Shell scripting and automation skills for operational support, troubleshooting, monitoring, and reliability improvements.
• Experience with ITIL processes and incident, problem, and change management.
• Experience collaborating with global teams and providing production support.

Nice To Haves

• Relevant certifications, such as AWS, Splunk, ITIL, CISSP, or related technology/security certifications.
• Experience with cloud, DevOps, Splunk, observability, SIEM, security operations, or data platform technologies.
• Hands-on experience with Anvilogic and Crogl or similar SIEM detection engineering platforms.

Responsibilities

• Lead support, administration, reliability, and day-to-day operations of enterprise cybersecurity, SIEM, observability, log management, and data platforms.
• Support the operational roadmap for cybersecurity platform capabilities, including SIEM operations, detection support, observability, log monitoring, data ingestion, and reporting.
• Support platform modernization and operational improvement initiatives across cybersecurity and security operations technologies.
• Provide technical leadership and mentorship to global support teams responsible for cybersecurity platforms, SIEM technologies, observability, log management, data ingestion, and operational analytics.
• Manage and support SIEM platform components, including search, indexing, clustering, data management, integrations, and operational support functions.
• Administer and optimize security operations capabilities for security monitoring, threat detection, alert triage, notable event management, and incident investigation.
• Use monitoring alerts, performance trends, service metrics, and operational insights to improve reliability, reduce recurring issues and technical debt, and strengthen resiliency.
• Lead platform upgrades, migrations, modernization initiatives, and service improvement programs.
• Support log pipeline and telemetry management platforms such as Cribl by monitoring data flow, troubleshooting routing or filtering issues, validating service health, and coordinating resolution with application and infrastructure teams.
• Support integration of security and operational telemetry into Databricks Data Lake environments for analytics, reporting, and long-term data retention.
• Monitor ingestion health, data quality, storage utilization, platform performance, and service availability across platform environments.
• Partner with Cyber Security, Infrastructure, Cloud Engineering, Application, and Service Management teams on production issues, troubleshooting, change coordination, and stable operational outcomes.
• Support detection engineering, SIEM use case development, alert workflows, and threat detection operations using Anvilogic, Crogl, or similar platforms.
• Improve workflows for alerting, monitoring, telemetry pipeline health, incident response, and observability to reduce manual effort and improve reliability.
• Lead incident response, root cause analysis, problem management, change execution, and continuous improvement.
• Define and improve operational standards, governance, documentation, monitoring procedures, SOPs, and support models aligned with ITIL, change management, and Log Telemetry Monitoring control requirements; measure outcomes using operational metrics and service performance indicators.
• Ensure compliance with enterprise security, audit, regulatory, and data lifecycle management requirements.
• Mentor engineers, coordinate global support teams, manage vendor engagement, and contribute to strategic technology planning.

Benefits

• 401(k) retirement savings plan with company match.
• Basic life, medical, dental, vision, long-term disability, and optional insurance coverage.
• Paid time off, including vacation, sick leave, short-term disability, and family care responsibilities.
• Access to an Employee Assistance Program.
• Eligibility for annual performance-based incentive awards, subject to stated exclusions.
• Eligibility for certain tax-advantaged savings plans.
• Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior