{"id":2905606,"url":"https://alion.io/job/moodys-sr-cybersecurity-engineer-splunk-cribl","title":"Sr Cybersecurity Engineer - SPLUNK & CRIBL","company":{"id":58685,"name":"Moody's","domain":"moodys.com","url":"https://alion.io/company/moody-s","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":44000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-28T21:43:38Z","employer_posted_date":null,"last_verified_at":"2026-09-28T21:43:38Z","board_verified":false,"closed_at":null,"days_open":35,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":35},"description":"At Moody's, we unite the brightest minds to turn today's risks into tomorrow's opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody's is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we're advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.\n\nIf you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.\n\nSkills And Competencies\n\n6-9 years of experience in cybersecurity engineering, data engineering, or platform administration with significant hands-on expertise in security data platforms\nStrong experience administering Splunk Cloud environments, including data models, field extractions, knowledge objects, indexing strategy, permissions management, and search processing\nDirect experience with Cribl Stream and Cribl Cloud for data ingestion, transformation, routing, reduction, and delivery across multiple destinations\nDeep understanding of log formats, parsing, normalization, and data enrichment practices, including experience with Common Information Model mapping\nProficiency in Python and/or JavaScript to develop automation, integrations, operational tooling, and platform enhancements\nExperience supporting cloud-hosted environments, preferably within Amazon Web Services infrastructure\nStrong analytical and troubleshooting skills with the ability to diagnose and resolve issues across complex distributed data pipelines\nDemonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use\n\nEducation\n\nBachelor's degree or equivalent qualification in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field\nSplunk certifications such as Splunk Administrator, Splunk Architect, or related certifications are preferred\n\nResponsibilities\n\nServe as the subject matter expert for security data platforms, ensuring reliable, scalable, and optimized data collection, transformation, and delivery across the cybersecurity ecosystem.\n\nAdminister, configure, and optimize Splunk Cloud environments, including indexes, data models, field extractions, permissions, and licensing utilization\nManage Cribl Cloud configurations and pipelines to support secure and efficient data ingestion, transformation, routing, and reduction\nDesign and implement onboarding processes for new data sources, ensuring accurate parsing, normalization, enrichment, and quality validation\nBuild and maintain transformations and processing pipelines that support detection engineering, dashboards, reporting, audit, and compliance requirements\nPartner with cybersecurity stakeholders to ensure security data is complete, reliable, and aligned with operational and investigative needs\nTroubleshoot and resolve ingestion issues, data gaps, latency concerns, and pipeline failures across source systems and platform components\nMonitor platform health, performance metrics, ingest volumes, and cost trends while identifying opportunities for optimization and efficiency improvements\nDevelop automation and operational tooling using Python and JavaScript, maintain platform documentation, and support upgrades, migrations, and capacity planning initiatives\n\nAbout The Team\n\nThe Cybersecurity Data Management team is responsible for building, operating, and optimizing the platforms and pipelines that collect, transform, route, and analyze security event data across the enterprise. The team supports detection and response, audit, and compliance programs by delivering high-quality, actionable data at scale. By joining this team, you will work with modern cloud-based technologies, including Splunk Cloud, Cribl Cloud, AWS, and automation solutions, while helping drive innovation, operational excellence, and responsible adoption of emerging technologies across Moody's cybersecurity environment.\n\nMoody's is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.\n\nCandidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody's Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.","description_format":"text","description_chars":5311,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Credit Bureaus & Rating Agencies","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-20T07:12:25Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.612,"p_room":0.35,"age_days":35,"expected_fill_days":14,"reasons":["seen:35","win:tail"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/moodys-sr-cybersecurity-engineer-splunk-cribl","json_url":"https://alion.io/job/moodys-sr-cybersecurity-engineer-splunk-cribl.json","meta":{"generated_at":"2026-11-03T09:00:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12921,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58685},"rest":"https://alion.io/mcp/rest/get_company?id=58685"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmoodys-sr-cybersecurity-engineer-splunk-cribl"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmoodys-sr-cybersecurity-engineer-splunk-cribl"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmoodys-sr-cybersecurity-engineer-splunk-cribl"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/moodys-sr-cybersecurity-engineer-splunk-cribl\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmoodys-sr-cybersecurity-engineer-splunk-cribl"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2905606}},{"tool":"search_jobs","arguments":{"company":"moodys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2905606},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}