Security Consulting Engineer

Cisco Systems, Inc.; Kraków; On-site; PLN 180,000 - 320,000; Full time

Job summary

Cisco Systems, Inc. in Kraków is seeking a Senior Software Consulting Engineer to bridge cutting-edge security technology with real-world outcomes. You will lead high-impact engagements with enterprise customers, designing and delivering Splunk-based security programs that work.

Responsibilities include end-to-end delivery of deployments, building automation workflows, developing detection content, and advising at the CISO level on risk and value. Travel up to 30% may be required.

Qualifications

• 7+ years of hands-on software implementation experience in a customer-facing professional services role
• Experience with XDR/SIEM and monitoring platforms (Checkmk, Elasticsearch, Dynatrace, AppDynamics, IBM QRadar)
• Scripting or programming knowledge (Python, Java, .Net) and REST APIs
• Security content development and automation/orchestration
• Experience communicating technical recommendations to CISO/architect/engineering audiences

Responsibilities

• Lead end-to-end delivery of enterprise security platform deployments, including architecture, configuration, content development, and go-live
• Design and automate incident response workflows using SOAR technology, integrating third-party tools
• Develop and tune detection content (MITRE ATT&CK aligned), risk-based alerting, and compliance reporting
• Onboard and normalize security data sources into a centralized monitoring environment
• Provide strategic advisory at CISO/SOC manager level and present architecture recommendations

Job description

Meet the Team:

You’ll be joining the Splunk Security practice in Krakow - a group of passionate experts dedicated to solving complex security challenges. We pride ourselves on being a collaborative, mentor-heavy environment where we learn from each other as much as we learn from our customers. Whether we’re architecting a new Security Operations Center (SOC) or prototyping a new automation workflow, we tackle these problems as a team, ensuring that everyone has the support they need to succeed and grow.

Your Impact:

As a Senior Software Consulting Engineer, you are the bridge between cutting-edge technology and real-world security outcomes. You will lead high-impact engagements with enterprise customers, helping them design and implement Splunk-based security programs that truly work.

You will:

• Lead end-to-end delivery: Manage enterprise security platform deployments, including system architecture, configuration, security content development, and go-live.
• Design & Automate: Build automated incident response workflows using SOAR technology, integrating third-party tools like EDR, identity platforms, and ticketing systems.
• Develop Detection Content: Build and tune advanced threat detection rules (e.g., MITRE ATT&CK), risk-based alerting models, and compliance reporting (PCI-DSS, ISO 27001, GDPR, NIST CSF).
• Data Onboarding: Normalize complex security data sources - firewalls, EDR, cloud platforms - into a centralized monitoring environment.
• Strategic Advisory: Engage at the CISO and SOC manager level to align technical solutions with business security objectives and present architecture recommendations based on risk and value.
• Drive Adoption & Innovation: Identify underutilized features, integrate AI/automation to improve response velocity, and collaborate with Cisco product teams to influence future development.
• Knowledge Sharing: Develop reusable tools, playbooks, and documentation while mentoring junior consultants to elevate the entire practice.
• Pre-Sales Support: Contribute to technical scoping and the development of Statements of Work (SOW).
• Available for travel - up to 30%

Minimum Qualifications:

• Bachelor's degree + 7 years of related experience, OR Master's degree + 4 years, OR PhD + 1 year, OR equivalent relevant work experience.
• Professional-level certification (e.g., CCNP), DevOps/automation certification or equivalent knowledge.
• 5+ years of hands-on software implementation experience in a customer-facing professional services role
• Proven technical expertise in XDR/SIEM and monitoring platforms (e.g., Checkmk, Elasticsearch, Dynatrace, AppDynamics, IBM QRadar), security content development, and security automation/orchestration
• Experience with scripting or programming (Python, Java, .Net or other), REST APIs, and workflow automation.
• Experience leading complex customer programs and communicating technical recommendations to CISO, architect, and engineering audiences.

Preferred Qualifications

• Certifications: Professional-level networking or security certifications (e.g., CCNP, CISSP, CEH, GIAC GCIH).
• Automation/DevOps: Cisco DevNet or equivalent automation certifications; experience with CI/CD pipelines, Infrastructure as Code (IaC), or DevSecOps practices.
• Splunk Expertise: Hands-on experience with Splunk Enterprise Security, Splunk SOAR/Phantom, or equivalent enterprise SIEM/SOAR platforms. (Splunk-specific certifications are a significant advantage).
• Background in SOC operations, incident response, threat hunting, or detection engineering.
• Experience delivering compliance programs (PCI-DSS, ISO 27001, NIST CSF, GDPR).
• Familiarity with platforms like Microsoft Sentinel, IBM QRadar, Palo Alto XSOAR, or Google Chronicle.
• Languages: Proficiency in an additional European language (Polish, German, French, or Arabic) is an advantage.

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.