Information Security Engineer
About The Position
Join our Observability and Infrastructure team, a dynamic group dedicated to modernizing Cisco’s logging and observability infrastructure. We focus on migrating and optimizing our Splunk environment to support high-fidelity data ingestion and robust security monitoring. Collaborating closely with the Security Operations Center (SOC) and cross-functional engineering teams, our team thrives on innovation, operational excellence, and delivering scalable solutions that enhance Cisco’s security posture and observability capabilities. As a Senior Splunk Engineer, you will lead the end-to-end migration of our on-premise Splunk Enterprise environment to Splunk Cloud, ensuring seamless transition with zero data loss and minimal business disruption. You will serve as the primary technical liaison between SOC and engineering teams, translating business needs into actionable dashboards, alerts, and reports. You will manage lifecycle activities including patching, upgrades, and configuration rollouts using automation tools like Ansible and GitLab. Your role includes optimizing data pipelines to ensure compliance with the Common Information Model (CIM) and organizational security standards. Additionally, you will proactively tune system performance, resolve ingestion bottlenecks, and implement security and compliance controls such as RBAC and data masking to meet regulatory requirements.
Requirements
- 5+ years of experience in Splunk administration and engineering, managing large-scale hybrid-cloud environments.
- Proven expertise in migrating complex Splunk architectures from on-premise to SaaS environments.
- Advanced knowledge of Splunk Enterprise and Splunk Cloud, including indexer clusters and search head clustering.
- Strong scripting skills in Python, PowerShell, or Bash for automation of tasks.
- Experience with cloud platforms such as AWS or Azure and networking fundamentals.
- Familiarity with SOC environments, security frameworks, incident response, and log analysis.
Nice To Haves
- Splunk Certified Administrator or Architect certification.
- Security certifications such as CompTIA Security+ or equivalent.
- Experience leading cross-functional teams and collaborating effectively with SOC and engineering groups.
- Knowledge of automation tools like Ansible and GitLab for lifecycle management.
- Strong communication and leadership skills to drive modernization initiatives.
Responsibilities
- Lead the end-to-end migration of on-premise Splunk Enterprise environment to Splunk Cloud.
- Ensure seamless transition with zero data loss and minimal business disruption.
- Serve as the primary technical liaison between SOC and engineering teams.
- Translate business needs into actionable dashboards, alerts, and reports.
- Manage lifecycle activities including patching, upgrades, and configuration rollouts using automation tools like Ansible and GitLab.
- Optimize data pipelines to ensure compliance with the Common Information Model (CIM) and organizational security standards.
- Proactively tune system performance.
- Resolve ingestion bottlenecks.
- Implement security and compliance controls such as RBAC and data masking to meet regulatory requirements.
Benefits
- medical, dental and vision insurance
- a 401(k) plan with a Cisco matching contribution
- paid parental leave
- short and long-term disability coverage
- basic life insurance
- 10 paid holidays per full calendar year
- 1 floating holiday for non-exempt employees
- 1 paid day off for employee’s birthday
- paid year-end holiday shutdown
- 4 paid days off for personal wellness
- 16 days of paid vacation time per full calendar year (non-exempt)
- flexible vacation time off program (exempt)
- 80 hours of sick time off provided on hire date and each January 1st thereafter
- up to 80 hours of unused sick time carried forward from one calendar year to the next
- additional paid time away may be requested to deal with critical or emergency issues for family members
- Optional 10 paid days per full calendar year to volunteer
- annual bonuses (for non-sales roles)
- performance-based incentive pay (for sales roles)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
