Technical Leader, Splunk Security

About this role

Responsibilities

• Technical Leadership:
• You will
• oversee the delivery of high-stakes programs, define the blueprints for things like SOAR frameworks and hybrid cloud environments, and
• advise
• senior leadership (CIOs, CISOs, VPs) on their long-term security strategy.
• Building Knowledge:
• You will
• create and share essential assets like threat detection libraries, blueprints for SOCs, and deployment guides to make sure our delivery is always high-quality and consistent.
• Security Engineering:
• You will
• design
• advanced threat detection systems (using things like MITRE ATT&CK and risk-based alerting) and build complex automation programs.
• You’ll
• also lead data onboarding and ensure everyone stays aligned with standards like PCI-DSS, ISO 27001, GDPR, NIST CSF, and SOX.
• Coaching &
• Pre-Sales
• :
• You will
• mentor
• more junior security
• consultants and lead pre-sales work, such as running architecture workshops and writing RFP responses.
• You’ll
• also drive innovation by finding ways to bring AI and machine learning into our daily security workflows.
• Minimum qualifications
• :
• Education:
• A Bachelor’s in CS, Electrical Engineering, or a related field with 8+ years of experience; a
• Master’s
• with 5+ years; or a PhD with 2+ years. (Relevant work experience is also fine).
• Certifications:
• You hold an expert-level certification (like CCIE or CISSP) or have proof of deep technical mastery. A professional-level DevNet or automation certification is a plus.
• Consulting Experience:
• You have 7+ years of experience in enterprise security—specifically in consulting or professional services—with at least 3 years as a technical or delivery lead.
• Deep Expertise:
• You are an expert in at least one of these: Splunk Enterprise Security architecture, SIEM platform design, SOC operations, security automation, or threat detection engineering.
• Proven Impact:
• You have a history of building tools, playbooks, or frameworks that other people
• actually use
• to get work done.
• Collaboration:
• You have experience working with product and engineering teams to solve complex problems and can influence the direction of a product.
• Technical Skills:
• You are strong in scripting (Python is our favorite), you know your way around REST APIs, and
• you’re
• comfortable with automation and workflow tools.
• Communication:
• You can explain complex tech to executives like CISOs and VPs, and
• you’re
• good at persuading people at all levels, whether they are technical or not.
• AI Ready:
• Demonstrated applied experience with AI-enabled solution delivery: working knowledge
• of AI-assisted CI/CD practices, API and automation integration with AI-driven tools, and AI solution validation techniques (output quality assurance, performance benchmarking, drift monitoring) in a consulting, engineering, or security context
• Preferred qualifications
• Splunk Certs:
• Any Splunk-specific certifications (Architect, Cybersecurity Analyst, SOAR Developer, etc.) and deep experience with Splunk Enterprise Security or SOAR/Phantom.
• AI Certs
• :
• AWS AI Practitioner,
• Azure AI App & Agent Developer,
• AWS ML Engineer - Associate
• Security D
• omains:
• You have certifications like CEH, GIAC, or CompTIA Security+. You know your way around threat hunting, red/blue team ops, compliance (PCI-DSS, etc.), or threat intel frameworks (MITRE, Sigma, etc.).
• Innovation:
• You have worked with CI/CD, Infrastructure as Code, or
• DevSecOps
• . You have a handle on AI/ML in security or know your way around other platforms like Sentinel,
• QRadar
• , or Palo Alto XSOAR.
• Languages:
• If you speak Polish, German, French, or
• Arabic
• , Spanish or Dutch
• , let us know!
• Why Cisco?
• At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
• Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.
• We are Cisco, and our power starts with you.