> Markdown version of [/jobs/ext/2005703-senior-platform-operations-engineer](https://www.wearedevelopers.com/jobs/ext/2005703-senior-platform-operations-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Platform Operations Engineer - **Company:** State Street - **Location:** Irvine, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Confluence, JIRA, Cloud Computing, Cloud Engineering, Cluster Analysis, Cyber Security, Data Retention, Linux, Elasticsearch, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Scripting, Cloud Platform System, Data Ingestion, System Availability, QRadar, Technical Debt, Indexer, Data Lakes, Data Analytics, Enterprise Integration, Data Management, Splunk, Software Version Control, Data Pipelines, Servicenow, Databricks - **Published:** August 9, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/senior-platform-operations-engineer-irvine-ca-usa-58872940 ## About the Role * Hands-on experience with Anvilogic and Crogl (Crogl) or similar SIEM detection platforms for detection engineering and alert workflows * Lead incident response, root cause analysis, and continuous improvement activities * Define and improve operational standards, governance, documentation, and SOPs aligned to ITIL and change management * Ensure compliance with security, audit, regulatory, and data lifecycle requirements * Mentor engineers, coordinate global teams, manage vendor engagement, and contribute to strategic technology planning Tasks * Experience administering enterprise SIEM, cybersecurity, observability, and log management platforms (Splunk, QRadar, Elastic) * Deep SIEM concepts: threat detection, incident response, correlation searches, data models, risk-based alerting * Log management, monitoring, operational analytics, and data onboarding frameworks * Cribl Stream for data routing, transformation, and optimization * Databricks Data Lake integration and data pipeline aaaaaa with * Cloud experience (preferably AWS) and Linux/Unix administration * Scripting/automation (Python/Shell) and version control practices * Familiarity with ServiceNow, Jira, Confluence for incident/problem/change management and documentation * ITIL processes and operational best practices; compliance and data lifecycle awareness * Strong communication and collaboration across global teams and time zones * 10+ years in technology infrastructure/platform engineering/security operations * 5+ years of technical leadership in a large enterprise * Relevant certifications (AWS, Splunk, ITIL, CISSP) preferred Key requirements * 401K with company match * comprehensive insurance coverage (medical, dental, vision, life, disability) * paid time off and family care benefits * Employee Assistance Program * annual performance-based incentive eligibility * volunteer days and flexible work-life support ## Description Experteer Overview In this role you will help shape the next generation of cybersecurity data, analytics, and AI-powered platforms. You will lead and support globally distributed teams responsible for enterprise SIEM, observability, and data platforms, ensuring high availability and reliable operations. You will drive platform modernization, incident response, and operational excellence across security technologies. This is an opportunity to impact threat detection and response at scale within a leading financial services firm. Compensation / Benefits * Lead the day-to-day operations and reliability of enterprise cybersecurity platforms and SIEM technologies * Support the operational roadmap for SIEM, observability, log management, and data ingestion across the organization * Drive platform modernization and operational improvements across cybersecurity platforms and tooling * Provide technical leadership and mentorship to global support teams for SIEM, observability, data pipelines, and analytics capabilities * Manage SIEM components (search, indexing, clustering, data management) and platform integrations across Splunk, Elastic Search, and related tools * Administer and optimize SIEM and security operations to support threat detection, alert triage, and incident investigation * Improve platform reliability using monitoring, metrics, and operational insights; reduce issues and technical debt * Lead upgrades, migrations, and service improvement programs; coordinate change activities and ensure SOP adherence * Support data telemetry pipelines and Cribl monitoring; validate service health and coordinate with cross-functional teams * Ensure Databricks Data Lake integration for analytics and long-term data retention * Monitor ingestion health, data quality, storage utilization, and platform availability across SIEM, log management, and data platforms * Collaborate with Cyber Security, Infrastructure, Cloud Engineering, and Service Management teams to resolve production issues * Hands-on experience with Anvilogic and Crogl (Crogl) or similar SIEM detection platforms for detection engineering and alert workflows * Lead incident response, root cause analysis, and continuous improvement activities * Define and improve operational standards, governance, documentation, and SOPs aligned to ITIL and change management * Ensure compliance with security, audit, regulatory, and data lifecycle requirements * Mentor engineers, coordinate global teams, manage vendor engagement, and contribute to strategic technology planning Tasks * Experience administering enterprise SIEM, cybersecurity, observability, and log management platforms (Splunk, QRadar, Elastic) * Deep SIEM concepts: threat detection, incident response, correlation searches, data models, risk-based alerting * Log management, monitoring, operational analytics, and data onboarding frameworks * Cribl Stream for data routing, transformation, and optimization * Databricks Data Lake integration and data pipeline management * Cloud experience (preferably AWS) and Linux/Unix administration * Scripting/automation (Python/Shell) and version control practices * Familiarity with ServiceNow, Jira, Confluence for incident/problem/change management and documentation * ITIL processes and operational best practices; compliance and data lifecycle awareness * Strong communication and collaboration across global teams and time zones * 10+ years in technology infrastructure/platform engineering/security operations * 5+ years of technical leadership in a large enterprise * Relevant certifications (AWS, Splunk, ITIL, CISSP) preferred Key requirements * 401K with company match * comprehensive insurance coverage (medical, dental, vision, life, disability) * paid time off and family care benefits * Employee Assistance Program * annual performance-based incentive eligibility * volunteer days and flexible work-life support ## Related Videos - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [GitOps for the people](https://www.wearedevelopers.com/videos/815-gitops-for-the-people) - [AI-Augmented DevOps with Platform Engineering](https://www.wearedevelopers.com/videos/1614-ai-augmented-devops-with-platform-engineering) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)