Cisco
Detection Engineering Technical Leader
$150K–$263K
Denver, Colorado, US +15 · Remote · Full-time · Posted Oct 5, 2026
- Location
- Denver, Colorado, US
Saint Paul, Minnesota, US
Boulder, Colorado, US
Houston, Texas, US
Knoxville, Tennessee, US
Chicago, Illinois, US
Philadelphia, Pennsylvania, US
Birmingham, Alabama, US
Portland, Oregon, US
Minneapolis, Minnesota, US
Elk Grove Village, Illinois, US
Dallas, Texas, US
Atlanta, Georgia, US
Little Rock, Arkansas, US
Hillsboro, Oregon, US
Colorado Springs, Colorado, US - Experience
- Bachelor’s + 8 years, master’s degree with 6+ years, or PhD + 3 years of related experience.
- Education
- Bachelor’s, master’s, or PhD; no equivalent-experience alternative stated.
- Visa sponsorship
- Must be a U.S. Person (U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee); some work may be restricted to U.S. citizens on U.S. soil.
About the job
Builds and leads scalable detection engineering systems that turn security telemetry into actionable alerts and support Splunk’s security monitoring and incident response.
What you'll do
- Develop detection content, SPL queries, data-processing pipelines, and automation for high-volume security telemetry.
- Partner with security teams to translate threats into detection requirements and close coverage gaps.
- Mentor teammates and lead cross-organizational detection initiatives.
What they ask for
- Bachelor’s degree plus 8 years, master’s degree plus 6 years, or PhD plus 3 years of related experience in security engineering, detection, security content development, SOC analysis, or security operations.
- Production SOC experience deploying and maintaining Splunk Enterprise Security content, including detections, data models, and data management.
- Experience building scalable SPL detection queries, including risk-based alerting, statistical baselining, and search optimization.
- Experience integrating AI/ML into detection engineering and translating threat intelligence and ATT&CK-mapped behaviors into measurable detection requirements.
Nice to have
- Collaborative Git-based development workflows, cloud security monitoring, or production Python.
- Threat research, statistical or ML methods for security data, detection automation, documentation, or cross-functional security initiatives.
Pay
$150,500.00 to $190,800.00 (base salary); $180,300.00 - $263,000.00 (base salary, New York City Metro Area); $160,700.00 - $234,100.00 (base salary, non-metro New York state & Washington state)
Tools
Splunk Enterprise Security, SPL, GitHub, GitLab, Bitbucket, AWS, GCP, Azure
AI focus
Integrate AI/ML techniques, including anomaly detection and LLM-assisted workflows, into detection pipelines to reduce false positives and accelerate content development; support agentic and human alert triage.
Model-written summary · the original posting is authoritative