Senior Detection Engineering Lead

Cisco Systems; Little Rock (AR); Hybrid; USD 151,000 - 191,000; Full time

Job summary

Cisco Systems is seeking a highly skilled Security Engineer in a hybrid role focused on detection engineering and scalable data pipelines. You will design detections, collaborate with Threat Hunting, SOC, and IR teams, and apply AI/ML techniques to improve accuracy and speed of event triage.

Qualifications include advanced degrees with substantial related experience, extensive SPL and Python coding, and cloud experience across AWS/GCP/Azure.

Qualifications

• Bachelor’s + 8 years of related experience or a Master’s degree with 6+ years of related experience as a Security Engineer, Detection Engineer, Security Content Developer, SOC Analyst, or Security Operations professional
• Deployed and maintained Splunk Enterprise Security content in a production SOC environment, including detections, data models, and data management
• Built detection queries in SPL at scale, including risk-based alerting, statistical baselining, and optimized searches across high-volume data sources
• Integrated AI/ML techniques (e.g., anomaly detection, LLM-assisted workflows) into detection engineering pipelines to reduce false positive rates and accelerate content development
• Translated threat intelligence and ATT&CK-mapped adversary behaviors into detection requirements with defined coverage metrics and measurable success criteria

Responsibilities

• Design scalable detection content and data pipelines to transform security telemetry into actionable alerts
• Collaborate with incident response teams to ensure rapid detection and response
• Mentor teammates on detection standards and engineering patterns
• Drive cross-organizational detection initiatives from requirements to deployment

Skills

Detection engineering

AI/ML techniques

Threat intelligence mapping

Incident response collaboration

Code reviews mentorship

Education

Bachelor’s degree + 8 years

Master’s degree + 6 years

PhD + 3 years

Tools

Git

Python

AWS

GCP

Azure

SPL

Job description

Cisco Systems is seeking a highly skilled Security Engineer in a hybrid role focused on detection engineering and scalable data pipelines. You will design detections, collaborate with Threat Hunting, SOC, and IR teams, and apply AI/ML techniques to improve accuracy and speed of event triage.

Qualifications include advanced degrees with substantial related experience, extensive SPL and Python coding, and cloud experience across AWS/GCP/Azure.