Technical Leader, Splunk Security

Cisco; Kraków; On-site; PLN 300,000 - 600,000; Full time

Job summary

Cisco Kraków is seeking a Security Consulting Engineering Technical Leader to guide our Splunk Security delivery team. You will serve as the senior technical authority, shaping architecture for complex customer programs across EMEA and creating internal resources that boost team performance.

This strategic, client-facing role involves high autonomy, mentoring juniors, and contributing to pre-sales and AI-assisted security initiatives, with travel as required.

Qualifications

• Bachelor's degree or higher in a relevant field with strong security focus.
• 7+ years in enterprise security consulting or delivery leadership.
• Expertise in Splunk Enterprise Security, SIEM design, SOC operations, or security automation.
• Experience presenting to executives and shaping product roadmaps.

Responsibilities

• Technical Leadership: oversee delivery of high-stakes programs, define blueprints for SOAR and hybrid cloud environments, advise senior leadership.
• Building Knowledge: create and share assets like threat detection libraries and deployment guides.
• Security Engineering: design advanced threat detection systems and automation programs; ensure PCI-DSS, ISO 27001, GDPR, NIST CSF, SOX alignment.
• Coaching & Pre-Sales: mentor junior consultants and lead pre-sales, including architecture workshops and RFP responses, exploring AI/ML in security workflows.

Skills

Python scripting

REST APIs

Automation

Splunk Enterprise Security

SOC operations

Security architecture

Education

Bachelor's in CS or related field

Master's degree

PhD

Tools

Splunk

SOAR/Phantom

XSOAR

Job description

Meet the Team

Cisco Professional Services is looking for a Security Consulting Engineering Technical Leader to join our Splunk Security practice in Poland. Splunk (now part of Cisco) is a top-tier data platform. Security teams worldwide use it to catch threats, automate responses, and keep an eye on complex environments in real-time. As a Technical Leader, you'll be the most senior authority on our Splunk Security delivery team in Krakow. You will be the go-to technical authority for the practice, lead architecture for our most complex customer programs in EMEA, and create the internal resources that help our whole team succeed.

Your Impact

You'll work with high autonomy, acting as the main person to call when complex security platform issues arise. You'll influence more than just individual projects- you'll help shape the Splunk product roadmap by working closely with our engineering teams and building tools that make the entire team faster and more efficient. Please note: this is a strategic, customer-facing role that requires travel.

Your Responsibilities

• Technical Leadership: You will oversee the delivery of high-stakes programs, define the blueprints for things like SOAR frameworks and hybrid cloud environments, and advise senior leadership (CIOs, CISOs, VPs) on their long-term security strategy.


• Building Knowledge: You will create and share essential assets like threat detection libraries, blueprints for SOCs, and deployment guides to make sure our delivery is always high-quality and consistent.


• Security Engineering: You will design advanced threat detection systems (using things like MITRE ATT&CK and risk-based alerting) and build complex automation programs. You'll also lead data onboarding and ensure everyone stays aligned with standards like PCI-DSS, ISO 27001, GDPR, NIST CSF, and SOX.


• Coaching & Pre-Sales : You will mentor more junior security consultants and lead pre-sales work, such as running architecture workshops and writing RFP responses. You'll also drive innovation by finding ways to bring AI and machine learning into our daily security workflows.

Minimum qualifications

• Education: A Bachelor's in CS, Electrical Engineering, or a related field with 8+ years of experience; a Master's with 5+ years; or a PhD with 2+ years. (Relevant work experience is also fine).


• Certifications: You hold an expert-level certification (like CCIE or CISSP) or have proof of deep technical mastery. A professional-level DevNet or automation certification is a plus.


• Consulting Experience: You have 7+ years of experience in enterprise security-specifically in consulting or professional services-with at least 3 years as a technical or delivery lead.


• Deep Expertise: You are an expert in at least one of these: Splunk Enterprise Security architecture, SIEM platform design, SOC operations, security automation, or threat detection engineering.


• Proven Impact: You have a history of building tools, playbooks, or frameworks that other people actually use to get work done.


• Collaboration: You have experience working with product and engineering teams to solve complex problems and can influence the direction of a product.


• Technical Skills: You are strong in scripting (Python is our favorite), you know your way around REST APIs, and you're comfortable with automation and workflow tools.


• Communication: You can explain complex tech to executives like CISOs and VPs, and you're good at persuading people at all levels, whether they are technical or not.


• AI Ready: Demonstrated applied experience with AI-enabled solution delivery: working knowledge of AI-assisted CI/CD practices, API and automation integration with AI-driven tools, and AI solution validation techniques (output quality assurance, performance benchmarking, drift monitoring) in a consulting, engineering, or security context

Preferred qualifications

• Splunk Certs: Any Splunk-specific certifications (Architect, Cybersecurity Analyst, SOAR Developer, etc.) and deep experience with Splunk Enterprise Security or SOAR/Phantom.


• AI Certs : AWS AI Practitioner, Azure AI App & Agent Developer, AWS ML Engineer - Associate


• Security D omains : You have certifications like CEH, GIAC, or CompTIA Security+. You know your way around threat hunting, red/blue team ops, compliance (PCI-DSS, etc.), or threat intel frameworks (MITRE, Sigma, etc.).


• Innovation: You have worked with CI/CD, Infrastructure as Code, or DevSecOps . You have a handle on AI/ML in security or know your way around other platforms like Sentinel, QRadar , or Palo Alto XSOAR.


• Languages: If you speak Polish, German, French, or Arabic , Spanish or Dutch , let us know!

Why Cisco?

At Cisco, we're revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond. We've been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalle