SIEM Data Engineer

State Street

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Quincy, MA
Salary
$90,000–$157,500 / yr
Posted
23 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $172k
This role $124k
$75k most similar roles pay here $226k

This role pays less than 89% of similar roles. Most pay $132,853–$211,200 — the shaded band above. At the midpoint, this role pays about $124k versus about $172k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 176 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 172 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · SIEM Data Engineer

The SIEM Data Engineer joins the Cyber Data & Analytics team to manage the lifecycle of cybersecurity telemetry and enterprise log data. This role involves onboarding, transforming, routing, and validating diverse data sources from infrastructure, cloud services, and security products to support threat detection, incident response, and cyber data science. You will build and maintain pipelines to deliver high-quality data into platforms like Splunk and Databricks while ensuring accuracy through parsing, filtering, and enrichment. Key technical requirements include experience with Cribl Stream, Splunk, and Databricks, alongside proficiency in SPL, SQL, Spark SQL, Python, Shell, or PowerShell. You will troubleshoot ingestion issues, monitor pipeline health, and collaborate with cross-functional teams to ensure telemetry is fit for purpose. The role solves the critical challenge of providing reliable, searchable data for proactive security monitoring and risk reporting.

What you'll do

  • Onboard security telemetry from diverse sources including cloud services, network devices, endpoints, and identity platforms.
  • Analyze source log formats to define ingestion requirements, metadata tagging, and downstream analytics use cases.
  • Configure data pipelines for parsing, filtering, masking, enrichment, and normalization before routing to Splunk or Databricks.
  • Validate data quality for freshness, completeness, schema consistency, and accuracy across various cyber data platforms.
  • Troubleshoot ingestion failures and data flow issues across collectors, pipelines, APIs, and cloud storage systems.
  • Provide second-line-of-defense support for operational issues related to data engineering jobs and pipeline failures.
  • Map schemas, assign source types, and perform CIM alignment to ensure telemetry is fit for purpose.
  • Document onboarding patterns, transformation logic, runbooks, and troubleshooting procedures for operational handoffs.

What we're looking for

  • Bachelor's or Master's degree in a technical field such as Computer Science, Cybersecurity, or Data Engineering (or equivalent experience).
  • 5+ years of experience in SIEM engineering, security data engineering, cybersecurity platform operations, or log analytics.
  • 2+ years of experience with Cribl Stream or similar data pipeline technologies like Fluent Bit, Vector, or Kafka.
  • 2+ years of experience with Databricks, data lakehouse platforms, or large-scale analytics platforms for telemetry validation.
  • Experience onboarding and troubleshooting security telemetry from diverse sources including cloud, network, identity, and application systems.
  • Proficiency in querying and validating data using SPL, SQL, Spark SQL, Python, Shell, or PowerShell.
  • Relevant certifications such as Cribl Certified Observability Engineer or Splunk certifications (preferred).
  • Cloud, infrastructure, data engineering, or cybersecurity certifications (preferred).

More like this

Similar roles

Senior SIEM Data Engineer

State Street

Quincy, MA 42 days ago
Splunk Databricks Cribl Stream Python SQL Spark SQL PySpark Shell PowerShell CI/CD Infrastructure-as-Code DataOps DevSecOps Kafka Fluent Bit Fluentd REST APIs Syslog
8+ yrs exp Hybrid

Security Data Solutions Engineer

State Street

Quincy, MA +4 37 days ago $120,000$202,500
Python SQL Spark Kafka Databricks Snowflake Splunk Microsoft Sentinel QRadar Elastic Cribl OpenTelemetry FluentBit AWS Azure Google Cloud ETL ELT DevSecOps NIST CSF MITRE ATT&CK
8+ yrs exp Hybrid

Senior Platform Operations Engineer

State Street

Quincy, MA 38 days ago $120,000$202,500
Splunk QRadar Elastic Search Cribl Databricks AWS Linux Unix Python Shell Scripting SIEM Log Management Observability ITIL Jira Confluence ServiceNow Incident Response
10+ yrs exp

Senior Data Engineer, AIML

Apple Inc

Cupertino, CA 44 days ago $184,700$324,800
Python Google Cloud Platform BigQuery Dataflow Apache Beam Pub/Sub Spark Dataproc Cloud Storage Composer Airflow ETL ELT CI/CD MLOps Distributed Systems Generative AI LLM
10+ yrs exp

Senior Data Engineer, AIML

Apple Inc

Cupertino, CA 36 days ago $184,700$324,800
Python Google Cloud Platform BigQuery Dataflow Apache Beam Pub/Sub Spark Dataproc Cloud Storage Composer Airflow ETL ELT CI/CD MLOps Distributed Systems Generative AI LLM
10+ yrs exp

Senior Data Engineer

BECU

Remote 8 days ago $141,800$173,300
Python SQL Scala Java Azure AWS GCP Microsoft Fabric Azure Databricks Snowflake Big Query Azure Data Factory Air Flow Cosmos DB Azure Functions GitHub Git CI/CD Azure DevOps Data Modeling
5+ yrs exp Remote