{"id":3385318,"url":"https://alion.io/job/blackrock-associate-cyber-observability","title":"Associate, Cyber Observability","company":{"id":5262,"name":"BlackRock","domain":"blackrock.com","url":"https://alion.io/company/blackrock","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":99,"open_postings":178,"ghost_share":0,"stale_share":0,"repost_share":0.034,"time_to_fill_p50_days":30,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Unix","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Git","optional":true},{"name":"Python","optional":true}],"status":"closed","first_seen_at":"2026-10-28T07:10:34Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-02T05:24:27Z","board_verified":false,"closed_at":"2026-11-02T05:24:27Z","days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"About this role\nThe Splunk, ITSI & Cribl Engineer is responsible for engineering, operating, maintaining, and enhancing enterprise observability and security telemetry platforms. The role focuses on Splunk Enterprise, Splunk IT Service Intelligence (ITSI), Splunk Enterprise Security (ES), and Cribl, supporting the collection, processing, monitoring, and analysis of operational and cybersecurity data.\nThe engineer will work with Information Security, infrastructure, cloud, network, application, and operations teams to deliver reliable and secure telemetry solutions.\nKey Responsibilities\nConfigure, administer, maintain, and troubleshoot Splunk Enterprise environments.\nDevelop and maintain Splunk ITSI services, KPIs, health scores, dashboards, alerts, and service monitoring.\nConfigure and maintain Cribl pipelines for telemetry collection, routing, filtering, parsing, enrichment, and transformation.\nSupport Splunk Enterprise Security (ES) and security monitoring capabilities.\nOnboard telemetry from applications, operating systems, cloud platforms, network infrastructure, security technologies, and enterprise services.\nDevelop SPL searches, dashboards, alerts, reports, and other Splunk knowledge objects.\nSupport Splunk CIM normalization and data models used by security analytics.\nTroubleshoot data ingestion, parsing, timestamping, field extraction, indexing, forwarding, and search issues.\nMonitor Splunk and Cribl platform health, capacity, data availability, and performance.\nSupport telemetry integrations using syslog, REST APIs, HTTP Event Collector (HEC), Universal Forwarders, and other collection methods.\nAssist with Splunk, ITSI, and Cribl installations, upgrades, configuration changes, and platform maintenance.\nWork with Security Operations and Detection Engineering teams to ensure appropriate telemetry is available for security monitoring, investigations, and detections.\nAssist with automation of platform administration, deployment, configuration, and monitoring activities.\nMaintain technical documentation, operational procedures, onboarding documentation, and engineering runbooks.\nParticipate in troubleshooting and incident-response activities involving security telemetry and observability platforms.\nCollaborate with technology teams to improve the reliability, quality, and usability of enterprise telemetry.\nRequired Qualifications\nHands-on experience with Splunk Enterprise administration or engineering.\nExperience with Splunk ITSI or enterprise monitoring/observability technologies.\nExperience with Cribl Stream or similar telemetry pipeline technologies.\nWorking knowledge of SPL.\nExperience onboarding and troubleshooting machine data.\nUnderstanding of parsing, field extraction, timestamps, metadata, indexing, and data routing.\nFamiliarity with dashboards, alerts, reports, and Splunk knowledge objects.\nUnderstanding of SIEM and cybersecurity logging principles.\nFamiliarity with Linux/Unix, networking, syslog, REST APIs, certificates, and enterprise infrastructure.\nStrong analytical and troubleshooting skills.\nAbility to collaborate across security and technology teams.\nPreferred Qualifications\nSplunk Enterprise Security experience\nSplunk ITSI experience\nCribl Stream experience\nSplunk or Cribl certifications\nAWS and/or Azure logging experience\nSplunk CIM and data model experience\nPython or shell scripting experience\nGit/source-control experience\nExposure to detection engineering and security operations\nExperience with distributed or clustered Splunk environments\nOur benefits\nTo help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.\nOur hybrid work model\nBlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person - aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.\n\nGuidance on AI use for candidates\nAt BlackRock, AI has long been part of how we work - enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting to know you through your own experiences, thinking, and judgment. To support you, we’ve provided guidance on when and how to use AI during our hiring process so you can approach each step with confidence and showcase your best self.\nAbout BlackRock\nAt BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress.\nThis mission would not be possible without our smartest investment - the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive.\nTo learn more about BlackRock, please visit Careers.BlackRock.com. We also encourage you to get to know us on LinkedIn, Instagram, YouTube, X, and TikTok.\nBlackRock is proud to be an Equal Opportunity Employer. We evaluate qualified applicants without regard to age, disability, family status, gender identity, race, religion, sex, sexual orientation and other protected attributes at law.","description_format":"text","description_chars":6293,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible time off","Hybrid work","Retirement plans"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Financial Services","Asset Management & Funds","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-28T07:10:34Z"},{"event":"close","at":"2026-11-02T05:24:27Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/blackrock-associate-cyber-observability","json_url":"https://alion.io/job/blackrock-associate-cyber-observability.json","meta":{"generated_at":"2026-11-03T10:51:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14998,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5262},"rest":"https://alion.io/mcp/rest/get_company?id=5262"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblackrock-associate-cyber-observability"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblackrock-associate-cyber-observability"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblackrock-associate-cyber-observability"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blackrock-associate-cyber-observability\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblackrock-associate-cyber-observability"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3385318}},{"tool":"search_jobs","arguments":{"company":"blackrock.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3385318},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}