Senior Engineer

Senior Engineer

Jersey City, New Jersey;Charlotte, North Carolina; Pennington, New Jersey

To proceed with your application, you must be at least 18 years of age.

Acknowledge (

Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.

Acknowledge (

Refer a friend

To proceed with your application, you must be at least 18 years of age.

Acknowledge (

Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.

Acknowledge (

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates' physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Role Overview:

We are seeking a Principal Splunk Engineer to lead the design, operation, and evolution of our large-scale Splunk Enterprise / Splunk Cloud deployment. The platform ingests multi-terabyte daily data volumes across security, infrastructure, and application domains and is a critical component of our SOC and threat-detection capabilities. The ideal candidate has deep expertise in Splunk architecture, large-scale data onboarding, performance optimization, SmartStore/Indexer Clustering, and security-focused use cases.

Key Responsibilities:

Platform Architecture & Operations:

• Architect, operate, and optimize a distributed, large-scale Splunk environment (indexer clusters, search head clusters, cluster masters, deployment servers, IDM, ADFS/SAML integrations)

• Lead capacity planning, index design, data retention strategies, and SmartStore lifecycle management

• Maintain high availability, scaling, and resilience across multi-site deployments (including DR strategy)

• Drive Splunk version upgrades, app updates, cluster maintenance, and platform hardening

Security Logging & SOC Enablement:

• Collaborate with SOC, Incident Response, and Threat Hunting teams to ensure high-quality security log ingestion

• Onboard and normalize logs from firewalls, EDR, identity platforms, cloud providers, network telemetry, and custom applications

• Develop and optimize detection content: correlation searches, risk-based alerting, data models, macros, lookups, summaries

• Ensure compliance with logging standards (MITRE ATT&CK mapping, CIS/SOC2/ISO27001 logging requirements)

Data Engineering & Observability:

• Build and manage ingestion pipelines, parsing, field extractions, CIM compliance, HEC configurations, and forwarder architecture

• Implement data lifecycle tiers, filtering strategies, routing, and ingestion controls to reduce cost and improve efficiency

• Optimize search performance, knowledge objects, summary indexing, and acceleration strategies

Governance & Best Practices:

• Establish Splunk development standards, dashboards, and naming conventions

• Mentor junior engineers and act as a technical escalation point for the team

• Maintain documentation, operational runbooks, and logging onboarding guidelines

• Partner with Engineering, Cloud, SecOps, and App teams to drive company-wide observability maturity

Required Qualifications:

5+ years experience administering large Splunk Enterprise or Splunk Cloud environments

Strong hands-on knowledge of:

• Indexer clustering, search head clustering

• SmartStore / S3-compatible object store design

• Universal/heavy forwarder architecture

• Ingest actions, parsing, props/transforms

• KVStore, RBAC, SAML, encryption

Deep experience with security log ingestion and SIEM use cases

Strong SPL expertise, including:

• Search optimization

• Summary indexing / data model acceleration

• CIM mapping and field normalization

Experience with Linux systems engineering, scripting (Python/Bash), and automation frameworks (Ansible, Terraform, GitOps preferred)

Preferred Qualifications:

Splunk certifications (Core Consultant, Enterprise Admin, Enterprise Architect, ES Analyst/ES Admin, or equivalent)

Experience with:

• Enterprise Security (ES)

• SOAR (Phantom or comparable)

• AWS/Azure/GCP cloud logging architectures

Familiarity with high-throughput message brokers (Kafka/FluentD/Cribl)

Background in cybersecurity engineering or threat detection

Skills:

• Automation

• Influence

• Result Orientation

• Stakeholder Management

• Technical Strategy Development

• Application Development

• Architecture

• Business Acumen

• Risk Management

• Solution Design

• Agile Practices

• Analytical Thinking

• Collaboration

• Data Management

• Solution Delivery Process

Shift:

1st shift (United States of America)

Hours Per Week:

40

Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

View your "Know your Rights ( " poster.

View the LA County Fair Chance Ordinance ( .

Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy ("Policy") establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Bank's required accommodation request process before your first day of work.

This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.