Director, Splunk Security Center of Excellence

Splunk; Massachusetts; Remote; USD 120,000 - 180,000; Full time

Job summary

An established industry player is seeking a Director for their Security Center of Excellence. This pivotal role involves leading a technically skilled team to enhance security operations using innovative Splunk solutions. You will drive strategic initiatives, manage cross-functional teams, and influence product roadmaps, all while fostering a culture of learning and collaboration. With a focus on operational reliability and engineering scale, this position offers a unique opportunity to shape the future of security practices. If you are passionate about technology and leadership, this role is your chance to make a significant impact.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan

Paid Time Off

Flexible Working Arrangements

Equity or Long-term Cash Awards

Qualifications

• 10+ years in Security Operations or Engineering roles with team management experience.
• Deep experience with Splunk products and maintaining complex deployments.

Responsibilities

• Lead the Splunk Security Center of Excellence across core teams.
• Align initiatives with broader security strategies and improve internal processes.

Skills

Security Operations

Splunk Products

Cross-functional Team Management

Strategic Thinking

Communication Skills

ITIL Framework

SRE Practices

Job description

Director, Splunk Security Center of Excellence

Join us to apply for the Director, Splunk Security Center of Excellence role at Splunk.

About The Role

We’re seeking a technically skilled and systems-oriented leader to oversee our Splunk Security Center of Excellence (SSCOE), the internal team responsible for scaling, maintaining, and developing a top-tier Splunk environment. The SSCOE supports our Global Security Operations (GSO) team and exemplifies how Splunk can achieve impactful security outcomes at scale.

This role involves leading strategy and execution across product operations, search engineering, and SOAR automation. You will shape internal practices and influence the future of Splunk products through operational insights. The position requires a blend of engineering expertise, operational understanding, and leadership, all within an environment that encourages experimentation, learning, and practical results.

You will collaborate across time zones and functions, managing senior technical leaders and working closely with Security Operations, Product Management, Engineering, and Customer Success teams.

Key Responsibilities

• Lead the Splunk Security Center of Excellence (SSCOE) across three core teams:
• Splunk Product Operations – ensure daily health and stability of Splunk platforms, including upgrades, support, and service delivery.
• Search Engineering – focus on scaling through capacity planning, SPL optimization, data modeling, and architecture improvements.
• SOAR Automation – develop orchestration capabilities to enhance security operations efficiency and consistency.
• Align SSCOE initiatives with broader security strategies, infrastructure reliability, and product adoption goals.
• Partner with detection engineering, incident response, and threat hunting teams to improve security outcomes through smarter data, content, and automation.
• Establish and monitor key metrics related to platform reliability, engineering impact, and service quality.
• Provide operational feedback to shape product roadmaps based on experience with complex deployments.
• Represent our Splunk environment externally through SOC tours, technical deep dives, and discussions with clients and partners.
• Improve internal processes, standards, and tooling using ITIL, SRE, and automation practices.
• Hire, support, and develop technical managers and individual contributors across geographies and specialties.

What We’re Looking For

• 10+ years in Security Operations, Engineering, or Platform roles, with 5+ years managing cross-functional teams.
• Deep experience with Splunk products, including Cloud, Enterprise, ES, and SOAR, with a proven track record in maintaining and evolving complex deployments.
• Ability to manage operational reliability and engineering scale, understanding their intersection.
• Strategic thinking with a focus on long-term systems design.
• Experience collaborating across teams—security, product, and engineering—to drive shared outcomes.
• Knowledge of frameworks like ITIL and SRE and their practical application.
• Excellent communication skills, capable of technical and high-level briefings.
• Leadership qualities that promote team growth, inclusion, and continuous learning.
• Bonus: Hands-on experience with COE programs or acting as “Customer Zero” for security platforms.

Why This Role Matters

This position sits at the nexus of engineering, operations, and security, offering the chance to influence how Splunk functions internally and how it is perceived externally. You will have ownership, impact, and a team eager to innovate with you.

Equal Opportunity Employer

Splunk values diversity, equity, inclusion, and belonging. We consider all qualified applicants without regard to race, religion, gender, sexual orientation, age, disability, veteran status, or other protected categories. We also consider applicants with criminal histories in accordance with legal requirements.

Compensation and Benefits

Base pay varies by location, with ranges provided for different regions. This role offers flexibility in working arrangements, including remote options. In addition to base pay, the role may include incentives, equity, or long-term cash awards. Benefits include medical, dental, vision, 401(k), paid time off, and more. Learn more at https://splunkbenefits.com.