Senior Detection Engineering Lead (AI/ML & Security)

Cisco; Chicago (IL); Hybrid; USD 151,000 - 191,000; Full time

Job summary

Cisco is seeking a Security Engineer within Splunk's Detection Engineering team to secure enterprise telemetry and automated response capabilities. You will design scalable detection content, build data pipelines, and leverage AI/ML to improve alert quality across high-volume data sources.

Join a cross-functional team partnering with Threat Intelligence, SOC, IR, and product teams to drive detection initiatives from requirements to deployment, delivering measurable improvements in security

Qualifications

• 8+ years in security engineering, or 6+ years with a Master’s or 3+ with a PhD.
• Experience deploying Splunk Enterprise Security in a production SOC.
• Built detection queries in SPL at scale with risk-based alerting and baselining.
• Applied AI/ML to detection pipelines to reduce false positives.
• Translated threat intel and ATT&CK into detections with defined metrics.

Responsibilities

• Design scalable detection content and data processing pipelines.
• Collaborate with Threat Hunting, SOC, IR and other teams to secure detections.
• Mentor teammates on detection standards and design patterns.
• Develop detection content and automation for 24x7 monitoring.

Skills

Splunk ES

Detection engineering

SPL queries

AI/ML in security

ATT&CK mapping

Git workflows

Cloud monitoring

Python scripting

Threat intel

Education

Bachelor’s degree

Master’s degree

PhD

Tools

GitHub/GitLab/Bitbucket

AWS CloudTrail

GCS audit logs

Azure Monitor

Job description

Cisco is seeking a Security Engineer within Splunk's Detection Engineering team to secure enterprise telemetry and automated response capabilities. You will design scalable detection content, build data pipelines, and leverage AI/ML to improve alert quality across high-volume data sources.

Join a cross-functional team partnering with Threat Intelligence, SOC, IR, and product teams to drive detection initiatives from requirements to deployment, delivering measurable improvements in security