Lead Detection Engineering & AI-Driven Security

Cisco; Elk Grove Village (IL); On-site; USD 151,000 - 191,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid time off & holidays

Job summary

Cisco is seeking an experienced Security Engineer to join the Detection Engineering team. You will design scalable detection content and data pipelines, transforming large security telemetry into actionable alerts, and apply AI/ML to stay ahead of threats.

You will collaborate across Threat Hunting, SOC, and IR teams, mentor colleagues, and contribute to engineering best practices while ensuring security coverage in hybrid, enterprise environments.

Qualifications

• Bachelor’s degree plus experience or higher degrees as specified; security engineer background.
• Experience deploying and maintaining Splunk Enterprise Security in production SOC.
• Built detection queries in SPL with high-volume data sources.
• Integrated AI/ML methods (anomaly detection, LLM workflows) into detection pipelines.
• Translated threat intelligence into detection requirements with measurable criteria.

Responsibilities

• Design and build scalable detection content and data pipelines for security telemetry.
• Collaborate with incident response and other teams to close detection gaps.
• Mentor teammates on detection standards and design patterns.

Skills

Security engineering

Splunk

Detection engineering

SPL

AI/ML in security

Education

Bachelor’s + 8 years of related experience or Master’s + 6 years or PhD + 3 years

Tools

Splunk Enterprise Security

Python

Job description

Cisco is seeking an experienced Security Engineer to join the Detection Engineering team. You will design scalable detection content and data pipelines, transforming large security telemetry into actionable alerts, and apply AI/ML to stay ahead of threats.

You will collaborate across Threat Hunting, SOC, and IR teams, mentor colleagues, and contribute to engineering best practices while ensuring security coverage in hybrid, enterprise environments.