Lead Detection Engineer, AI-Driven Security

Cisco Systems, Inc.; Denver (CO); Hybrid; USD 150,000 - 191,000; Full time

Benefits offered by this job

Paid holidays

Birthday off

Vacation time

Sick time off

Volunteer days

Job summary

Cisco Systems, Inc. seeks a Security Engineer, Detection Engineering, to secure the Splunk portfolio. You will design and build scalable detection content and partner fluidly with Threat Hunting, SOC, and incident response teams to ensure rapid, accurate security signals.

This hybrid role emphasizes engineering rigor, data-driven detection, and mentorship, shaping how we deploy advanced detection across enterprise environments.

Qualifications

• Bachelor's degree with 8+ years in security engineering or equivalent.
• Production Splunk Enterprise Security content deployment experience.
• Built detection queries in SPL at scale with high-volume data sources.
• Integrated AI/ML techniques into detection pipelines to reduce false positives.
• Mapped threat intel to detection requirements with measurable criteria.

Responsibilities

• Design scalable detection content for Splunk portfolio.
• Collaborate with Threat Hunting, SOC, and IR teams to improve coverage.
• Mentor peers on detection standards, design patterns, and reviews.
• Lead evolution of security content and detection engineering tooling.

Skills

Security engineering

SPL queries

AI/ML in security

Threat intelligence mapping

Detection pipelines

Education

Bachelor's degree in related field

Master's degree in related field

PhD in related field

Tools

GitHub

GitLab

Bitbucket

Python

Splunk ES

CloudTrail / Azure Monitor

Job description

Cisco Systems, Inc. seeks a Security Engineer, Detection Engineering, to secure the Splunk portfolio. You will design and build scalable detection content and partner fluidly with Threat Hunting, SOC, and incident response teams to ensure rapid, accurate security signals.

This hybrid role emphasizes engineering rigor, data-driven detection, and mentorship, shaping how we deploy advanced detection across enterprise environments.