Security Build Specialist

MEET THE TEAM The Splunk Security Specialist team is a high-energy, global group responsible for driving technical enablement through our acclaimed "Boss of the SOC" (BOTS) program.

About Cisco

• We bridge the gap between complex engineering roadmaps and the front lines of security, turning product features into immersive, real-world educational experiences.
• Our team operates as a specialized unit of researchers, storytellers, and educators, collaborating across global theaters to ensure our security technology is effectively adopted at scale.
• We are currently expanding our team with three new hires who will help shape our next chapter and influence the future of the broadest security portfolio in the industry.
• It is an exciting time to join us as we scale our influence from the ground floor up to the industry's biggest stages, including Cisco Live and .conf.
• At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond.
• We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds.
• These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
• Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions.
• Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless.
• We work as a team, collaborating with empathy to make really big things happen on a global scale.
• Because our solutions are everywhere, our impact is everywhere.
• We are Cisco, and our power starts with you.

Responsibilities

• Drive technical enablement across the security market by designing and delivering high-impact workshops and demos that demonstrate the value of Splunk and Cisco’s security portfolio.
• Help drive the development of end-to-end of "Boss of the SOC" (BOTS) scenarios to sharpen incident response skills for customers and partners worldwide.
• Collaborate with Product, Engineering, and Marketing teams to align technical content with business goals and global sales plays.
• Author thought leadership pieces and present at large-scale industry events to establish technical authority and guide the broader security community.
• Achieve success by driving a 5% increase in security adoption metrics and ensuring participant feedback remains at a 4.5/5 or higher across all engagements.

Requirements

• Minimum of 8 years of professional experience in security operations, incident response, or threat hunting.
• Hands-on proficiency with Splunk Enterprise Security, SOAR, or an equivalent SIEM/SOAR platform.
• Proven experience designing and delivering technical workshops, labs, or hands-on security exercises.
• Technical writing experience creating lab guides, documentation, or educational presentations.
• Demonstrated experience with scripting languages such as Python, Terraform, or Ansible for environment automation.

Preferred

• QUALIFICATIONS Demonstrated experience managing gamified learning programs (e.g., BOTS, CTF, or cyber ranges).
• Active professional certifications such as CISSP, OSCP, GIAC, or Splunk-specific credentials.
• Background in pre-sales engineering, detection engineering, or security research.
• Public track record of technical contributions, including blogs, webinars, or open-source community projects.
• Strong public speaking and presentation skills tailored for both executive and technical practitioner audiences.
• Why Cisco?