Customer-Facing Splunk ES Security Consultant & SOAR

Cisco; Kraków; On-site; PLN 180,000 - 260,000; Full time

Job summary

Cisco is seeking an experienced Splunk security engineer in Krakow to own end-to-end Splunk Enterprise Security deployments for enterprise customers across EMEA. You will design detection content, onboard data sources from firewalls, EDR, identity systems, and cloud platforms, and wire automated responses in Splunk SOAR.

You will collaborate closely with customer SOC teams and translate requirements into working security solutions.

Qualifications

• Bachelor's degree or higher with 5+ years of hands-on security operations, SIEM/SOAR experience.
• Strong scripting or automation skills (Python preferred) and comfort with REST APIs.
• Fluent English and clear customer communication skills.

Responsibilities

• Own end-to-end Splunk Enterprise Security deployments from day one to production-ready platforms.
• Design and build detection content and alerting; onboard data sources and CIM normalization.
• Automate response workflows in Splunk SOAR and integrate with customer SOC teams.
• Create comprehensive runbooks, documentation, and pre-sales scoping contributions.
• Help ensure compliance frameworks (PCI-DSS, ISO 27001, GDPR, NIST CSF) are operationalised.

Skills

Python scripting

REST APIs

English fluency

Customer collaboration

Education

Bachelor's degree + 5 years of experience

Tools

Splunk Enterprise Security

Splunk SOAR

Job description

Cisco is seeking an experienced Splunk security engineer in Krakow to own end-to-end Splunk Enterprise Security deployments for enterprise customers across EMEA. You will design detection content, onboard data sources from firewalls, EDR, identity systems, and cloud platforms, and wire automated responses in Splunk SOAR.

You will collaborate closely with customer SOC teams and translate requirements into working security solutions.