Blackstone

Blackstone

Posted via Workday

Security Operations Engineer, AVP - Security Operations Engineering

Posted Sep 3, 2026

Role at a glance

Salary
Not yet verified Check the description for pay details; an amount or pay period has not been verified.
Location
Miami, United States
Work arrangement
On-site
Employment
Full-time
Experience
6+ years in a hands-on technical role in information security or related field 6+ years of infrastructure/software engineering experience with a focus on Cloud technologies Experience with cloud native architectures such as AWS, Azure, Office 365 etc. Hands-on experience with SIEM (e.g. Splunk) for detection and security orchestration and automated response (SOAR) Development/scripting experience (Python and/or PowerShell) Proven experience with infrastructure-as-code frameworks (e.g. Terraform Cloud) Proven experience working with git source control and CI/CD systems (Jenkins, Gitlab CICD/Runners) Proven experience with multiple security event detection platforms (and orchestrating those to a centralized detection platform). Experience with containers and orchestration platforms (Kubernetes, AWS ECS) Experience with asset hardening (CIS/STIG) Experience with Endpoint Detection and Response systems
Education
B.S. in Computer Science or Engineering or similar technical program

Spotted an issue?

We’ll check it against the original posting.

Log in to report

Role Summary

AI-generated

The AVP Security Operations Engineer provides SIEM, automation, and security platform engineering support for cross-functional projects and day-to-day operations. The role also participates in Tier 3 security investigations and works to ensure asset security baselines and visibility across the estate.

What You'll Do

  • Design and customize SIEM search queries and dashboards for searching, forensics, and analytics.
  • Develop SOAR automations for response and investigation workflows.
  • Develop and document configuration standards, policies, and procedures for security and SIEM platforms.
  • Lead technical development and delivery of custom content, system integration, and event reporting.
  • Use infrastructure-as-code frameworks to provision and maintain cloud resources.
  • Build and maintain security-related systems for CI/CD, secrets management, and other core services.

Generated from the employer's posting. Verify important details before applying.

View full posting

Qualifications

Requires 6+ years in hands-on information security or related work and 6+ years of infrastructure/software engineering focused on cloud technologies. Qualifications include SIEM and SOAR, scripting, infrastructure-as-code, Git and CI/CD, security detection platforms, containers, asset hardening, endpoint detection and response, communication and documentation skills, and a B.S. in Computer Science, Engineering, or a similar technical program.

Required

  • 6+ years in a hands-on technical role in information security or related field
  • 6+ years of infrastructure/software engineering experience with a focus on Cloud technologies
  • Experience with cloud native architectures such as AWS, Azure, Office 365 etc.
  • Hands-on experience with SIEM (e.g. Splunk) for detection and security orchestration and automated response (SOAR)
  • Development/scripting experience (Python and/or PowerShell)
  • Proven experience with infrastructure-as-code frameworks (e.g. Terraform Cloud)
  • Proven experience working with git source control and CI/CD systems (Jenkins, Gitlab CICD/Runners)
  • Proven experience with multiple security event detection platforms (and orchestrating those to a centralized detection platform).

Original job description

Content provided by the employer

Blackstone is the world’s largest alternative asset manager. Blackstone seeks to deliver compelling returns for institutional and individual investors by strengthening the companies in which the firm invests. Blackstone’s over $1.3 trillion in assets under management include global investment strategies focused on real estate, private equity, credit, infrastructure, life sciences, growth equity, secondaries and hedge funds. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, X (Twitter), and Instagram. 

Business Unit Overview:

Blackstone Technology & Innovations (BXTI) is the technology team at the core of each of Blackstone’s businesses and new growth initiatives. Serving both internal and external clients, we work to build the next generation of systems that manage risk, create efficiency and improve transparency within the firm and across our broad community of investors and portfolio companies.

BXTI is nimble and entrepreneurial – our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one. We are problem solvers who can take projects from idea to implementation. We believe in active mentoring and developing excellence. We collaborate to find the best answers for our customers and for

Position Overview:

The Blackstone Security Operations – Engineering team is growing to support new cross-functional security needs. The AVP Security Engineer is responsible for providing Security Information and Event Management (SIEM), automation, and security platform engineering support to assist both new cross-team engineering projects and day-to-day SIEM operations / engineering support. The AVP Security Operations Engineer will also participate in Tier 3 security investigations and must have strong working knowledge of incident response procedures and technology. They need to have hands-on experience with SIEM technology; experience implementing / managing security platforms used in a SOC environment is a plus. In addition, they will also be tasked to ensure that our assets meet baseline security standards and that we have the visibility and observability across all assets in the estate.

Responsibilities:

  • Designing and customizing complex SIEM search queries, dashboards, and promoting advance searching, forensics, and analytics

  • Design and develop SOAR automations to support response and investigation workflows

  • Developing and documenting configuration standards, policies, and procedures for operating security / SIEM platforms

  • Perform as technical lead in the development and delivery of custom content, system integration, and event reporting

  • Leverage infrastructure-as-code frameworks to provision and maintain cloud resources (Terraform)

  • Design, build, and maintain critical security-related systems for CI/CD, secrets management, and other core services

Qualifications:

  • 6+ years in a hands-on technical role in information security or related field

  • 6+ years of infrastructure/software engineering experience with a focus on Cloud technologies

  • Experience with cloud native architectures such as AWS, Azure, Office 365 etc.

  • Hands-on experience with SIEM (e.g. Splunk) for detection and security orchestration and automated response (SOAR)

  • Development/scripting experience (Python and/or PowerShell)

  • Proven experience with infrastructure-as-code frameworks (e.g. Terraform Cloud)

  • Proven experience working with git source control and CI/CD systems (Jenkins, Gitlab CICD/Runners)

  • Proven experience with multiple security event detection platforms (and orchestrating those to a centralized detection platform).

  • Experience with containers and orchestration platforms (Kubernetes, AWS ECS)

  • Experience with asset hardening (CIS/STIG)

  • Experience with Endpoint Detection and Response systems

  • Strong written and oral communication skills; effectively explains technical ideas to non-technical individuals at any level

  • Strong documentation skills and attention to detail

  • B.S. in Computer Science or Engineering or similar technical program


The duties and responsibilities described here are not exhaustive and additional assignments, duties, or responsibilities may be required of this position.  Assignments, duties, and responsibilities may be changed at any time, with or without notice, by Blackstone in its sole discretion.

Expected annual base salary range:

$106,000 - $170,000

Actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, qualifications and job location. For roles located outside of the US, please disregard the posted salary bands as these roles will follow a separate compensation process based on local market comparables.

Additional compensation and benefits offered in connection with the role consist of comprehensive health benefits, including but not limited to medical, dental, vision, and FSA benefits; paid time off; life insurance; 401(k) plan; and discretionary bonuses. Certain employees may also be eligible for equity and other incentive compensation at Blackstone’s sole discretion.

Blackstone is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity or expression, disability, genetic predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other class or status in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including but not limited to hiring, placement, promotion, termination, transfer, leave of absence, compensation, and training.  All Blackstone employees, including but not limited to recruiting personnel and hiring managers, are required to abide by this policy.

If you need a reasonable accommodation to complete your application, please contact Human Resources at 212-583-5000 (US), +44 (0)20 7451 4000 (EMEA) or +852 3656 8600 (APAC).

Depending on the position, you may be required to obtain certain securities licenses if you are in a client facing role and/or if you are engaged in the following:

  • Attending client meetings where you are discussing Blackstone products and/or and client questions;

  • Marketing Blackstone funds to new or existing clients;

  • Supervising or training securities licensed employees;

  • Structuring or creating Blackstone funds/products; and

  • Advising on marketing plans prepared by a sales team or developing and/or contributing information for marketing materials.

Note: The above list is not the exhaustive list of activities requiring securities licenses and there may be roles that require review on a case-by-case basis.  Please speak with your Blackstone Recruiting contact with any questions.

To submit your application please complete the form below. Fields marked with a red asterisk * must be completed to be considered for employment (although some can be answered "prefer not to say"). Failure to provide this information may compromise the follow-up of your application. When you have finished click Submit at the bottom of this form.

Blackstone

About the company

Blackstone

Large Enterprise

Blackstone is a leading global investment firm that specializes in private equity, real estate, credit, and hedge fund investment strategies. Founded in 1985, the company has grown to manage billions of dollars in assets across various sectors and regions, making it one of the largest alternative investment managers in the world. Blackstone is known for its rigorous investment approach and commitment to generating long-term value for its investors while focusing on operational excellence and sustainability in its portfolio companies. Through its diverse range of investment initiatives, Blackstone plays a significant role in shaping industries and driving economic growth globally.