Lead Detection Engineer, Security Analytics

Socket.dev; Denver (CO); Hybrid; USD 151,000 - 191,000; Full time

Job summary

Cisco is seeking a skilled Security Engineer to join the Detection Engineering team, focused on securing the Splunk portfolio and building scalable detection content. You will design data pipelines, implement AI/ML aided detection, and collaborate with incident response to close detection gaps.

You will mentor teammates, write production-grade Python, and translate threat intel into measurable detection coverage. This is a genuine hybrid role with opportunities across a broad security program.

Qualifications

• Bachelor’s + 8 years of related experience or a Master’s degree with 6+ years of related experience, or a PhD + 3 years of related experience in Security roles.
• Deployed and maintained Splunk Enterprise Security content in a production SOC environment.
• Built detection queries in SPL at scale, including risk-based alerting and baselining.
• Integrated AI/ML techniques into detection pipelines to reduce false positives and accelerate content development.
• Translated threat intelligence into detection requirements with measurable criteria.

Responsibilities

• Design and build data processing pipelines transforming high-volume security telemetry into actionable alert signals.
• Create scalable detection content and AI/ML-enabled detection pipelines.
• Collaborate with incident response, Threat Hunting, SOC, and product teams to close detection gaps.
• Mentor teammates on detection standards and design patterns and contribute to detection content development.

Skills

Security Engineer

Detection Engineer

Security Content Developer

SOC Analyst

Security Operations

Education

Bachelor’s degree

Master’s degree

PhD

Tools

Splunk Enterprise Security

SPL

Python

Git-based workflows

Cloud platforms AWS/GCP/Azure

Job description

Cisco is seeking a skilled Security Engineer to join the Detection Engineering team, focused on securing the Splunk portfolio and building scalable detection content. You will design data pipelines, implement AI/ML aided detection, and collaborate with incident response to close detection gaps.

You will mentor teammates, write production-grade Python, and translate threat intel into measurable detection coverage. This is a genuine hybrid role with opportunities across a broad security program.