{"id":3514847,"url":"https://alion.io/job/state-street-data-and-splunk-engineer-officer","title":"Data and Splunk Engineer - Officer","company":{"id":1806,"name":"State Street","domain":"statestreet.com","url":"https://alion.io/company/state-street","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":246,"ghost_share":0.033,"stale_share":0.354,"repost_share":0.126,"time_to_fill_p50_days":31,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Data Science","role_family":"Data Science","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":17},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Databricks","optional":false},{"name":"Delta Lake","optional":false},{"name":"ETL/ELT","optional":false},{"name":"Git","optional":false},{"name":"pySpark","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"Embeddings","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"MLFlow","optional":true},{"name":"NLP","optional":true},{"name":"Power BI","optional":true},{"name":"RAG","optional":true},{"name":"Spark","optional":true}],"status":"live","first_seen_at":"2026-10-30T09:52:30Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-06T12:21:55Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Job Description\nData Engineer / Data Scientist/ Splunk Engineer , Officer\nRole Level\nOfficer\nRole Type\nIndividual Contributor\nFocus Area\nData Engineering & Data Science\nSkill Mix\n70% Data Engineering / Data Science; 30% Splunk Engineering\nExperience Target\nApproximately 10 years\nWho we are looking for\nThe Data Engineer / Data Scientist/ Splunk Engineer , Officer, will support enterprise cybersecurity observability and analytics by combining deep Splunk engineering expertise with scalable data engineering and applied data science capabilities. The role is weighted (70%) towards Databricks-based data engineering, advanced analytics, and practical machine-learning solutions that convert complex security telemetry into reliable, actionable intelligence. The remaining focus(30%) towards Splunk engineering, with responsibility for developing searches, dashboards, alerts, data models, telemetry onboarding, and platform monitoring.\nWhat you will be responsible for\nAs a Data Engineer / Data Scientist / Splunk Engineer , you will:\n· Design, develop, optimize, and maintain Splunk SPL searches, dashboards, reports, alerts, data models, field extractions, lookups, macros, and reusable knowledge objects.\n· Build and enhance security observability solutions across endpoint, web proxy, firewall, network, identity, cloud, vulnerability, threat intelligence, and other enterprise telemetry.\n· Onboard and validate new data sources, covering source analysis, parsing, normalization, timestamp validation, field mapping, data quality, and search readiness.\n· Troubleshoot ingestion failures, telemetry gaps, latency, duplication, parsing issues, search failures, and dashboard performance concerns.\n· Improve Splunk performance using efficient SPL, data model acceleration, summary indexing, lookup optimization, and appropriate search scheduling.\n· Develop proactive monitoring and alerting for Splunk platform health, ingestion volumes, search execution, dashboard availability, and operational service levels.\n· Partner with SOC, threat intelligence, detection engineering, security platform, and data teams to improve detection readiness and operational analytics.\n· Design and maintain scalable data ingestion and transformation pipelines using Python, SQL, PySpark, Databricks, Delta Lake, and cloud services.\n· Build curated, analytics-ready datasets with strong controls for data quality, reconciliation, lineage, observability, testing, and performance.\n· Integrate Splunk and Databricks workflows to support telemetry enrichment, historical analytics, aggregation, and downstream reporting.\n· Perform exploratory analysis and feature engineering to identify trends, anomalies, relationships, and risk indicators across cybersecurity datasets.\n· Develop or support practical statistical and machine-learning use cases including anomaly detection, classification, clustering, prioritization, and entity correlation.\n· Operationalize analytics through Git, CI/CD, automated testing, workflow orchestration, monitoring, documentation, and production support.\n· Create clear technical documentation, dashboard guides, data dictionaries, operational runbooks, and knowledge-sharing materials.\n· Mentor junior engineers, contribute to peer reviews, and promote reusable engineering and analytics practices.\nWhat we value\nThese skills will help you succeed in this role:\n· Strong hands-on expertise in Splunk, including advanced SPL, dashboards, alerts, reports, data models, field extractions, lookups, macros, and performance optimization.\n· Experience with enterprise-scale log ingestion, security telemetry onboarding, data validation, troubleshooting, and operational monitoring.\n· Strong programming and data engineering skills using Python, SQL, PySpark, Databricks, ETL/ELT, Delta Lake, and distributed processing.\n· Understanding of Lakehouse architecture, data modeling, orchestration, data quality, reconciliation, lineage, observability, and pipeline optimization.\n· Practical knowledge of statistical analysis and machine-learning concepts such as feature engineering, anomaly detection, classification, clustering, and model evaluation.\n· Understanding of cybersecurity data and workflows, including SIEM/SOAR, threat detection, endpoint telemetry, vulnerability data, identity events, incidents, and threat intelligence.\n· Ability to independently own technical deliverables, resolve complex issues, collaborate across teams, and communicate effectively with technical and senior stakeholders.\n· Strong focus on automation, documentation, operational excellence, governance, scalability, resiliency, and measurable outcomes.\nEducation & Qualifications\nMinimum Qualifications\n· Approximately 10 years of professional experience across Splunk engineering, security analytics, data engineering, data science, cybersecurity, cloud, or related technology disciplines.\n· Bachelor's degree in computer science, information technology, data science, statistics, mathematics, engineering, cybersecurity, or a related discipline, or equivalent professional experience.\n· Demonstrated hands-on experience with Splunk engineering and advanced SPL in an enterprise environment.\n· Hands-on experience with Python, SQL, PySpark, Databricks or comparable data platforms, ETL/ELT, and large-scale data processing.\n· Experience working with cloud platforms, preferably AWS or Azure, and with Git-based version control and CI/CD practices.\n· Strong analytical, troubleshooting, documentation, and stakeholder communication skills.\nPreferred Qualifications\n· Experience within a SOC, threat detection, threat intelligence, security operations, or cybersecurity analytics environment.\n· Experience with Cribl or similar telemetry routing, shaping, enrichment, and pipeline technologies.\n· Knowledge of security data normalization, MITRE ATT&CK concepts, incident enrichment, detection engineering, and SIEM/SOAR workflows.\n· Exposure to MLflow, MLOps, Generative AI, LLMs, embeddings, vector search, RAG, NLP, or graph analytics.\n· Experience with Power BI or equivalent visualization and reporting technologies.\n· Experience in financial services, regulated industries, or environments with strong privacy, governance, security, and audit requirements.\n· Relevant Splunk, Databricks, cloud, data engineering, data science, or cybersecurity certifications.\nTechnical Skills\nSkill Area\nExpected Capabilities\nSplunk Engineering\nAdvanced SPL, dashboards, reports, alerts, data models, field extractions, lookups, macros, onboarding, troubleshooting, optimization and platform monitoring.\nData Engineering\nPython, SQL, PySpark, Databricks, ETL/ELT, Delta Lake, Lakehouse, data modeling, orchestration, data quality, lineage and observability.\nData Science / ML\nExploratory analysis, feature engineering, anomaly detection, classification, clustering, model evaluation and explainability.\nCloud & DevOps\nAWS or Azure, Git, CI/CD, automated testing, scalable processing, workflow monitoring and production support.\nCybersecurity Analytics\nSecurity telemetry, SIEM/SOAR, threat detection, endpoint and network data, vulnerability, identity, incident and threat intelligence datasets.\nVisualization & Reporting\nSplunk dashboards, Power BI or equivalent tools, operational metrics, trend analysis and stakeholder reporting.\nAdditional Requirements\n· This is an individual contributor role with strong cross-functional collaboration and mentoring expectations.\n· The role requires sound judgment when working with sensitive cybersecurity, risk, operational, and regulated data.\n· The candidate should be comfortable balancing hands-on Splunk delivery, production data engineering, applied analytics, and stakeholder communication.\nWhy this role is important to us\nCybersecurity depends on complete, reliable, and searchable telemetry supported by scalable data engineering and effective analytics. This role bridges Splunk Engineering, Data Engineering, and Data Science to strengthen observability, improve threat detection, accelerate investigation, and deliver trusted security insights for enterprise decision-making.\nAbout State Street\nState Street is one of the world's leading providers of financial services to institutional investors, including investment servicing, investment management, investment research, and trading. Technology and cybersecurity are critical enablers of our ability to safeguard information, support clients, and operate at enterprise scale.\nWe value collaboration, innovation, inclusion, and responsible technology. We are looking for technical talent who can solve meaningful problems, communicate clearly, and help build secure, scalable, data-driven capabilities for the future.\nState Street is an equal opportunity and affirmative action employer.\nAbout State Street\nAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.\nWe are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.\nAs an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.\nDiscover more information on jobs at StateStreet.com/careers\nRead our CEO Statement","description_format":"text","description_chars":9969,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Asset Management & Funds","Information Security","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-30T09:52:30Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":31,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/state-street-data-and-splunk-engineer-officer","json_url":"https://alion.io/job/state-street-data-and-splunk-engineer-officer.json","meta":{"generated_at":"2026-11-06T13:44:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25259,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1806},"rest":"https://alion.io/mcp/rest/get_company?id=1806"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstate-street-data-and-splunk-engineer-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstate-street-data-and-splunk-engineer-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstate-street-data-and-splunk-engineer-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/state-street-data-and-splunk-engineer-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstate-street-data-and-splunk-engineer-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3514847}},{"tool":"search_jobs","arguments":{"company":"statestreet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3514847},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}