Meet the Team: 

You’ll be joining the Splunk Security practice in Krakow - a group of passionate experts dedicated to solving complex security challenges. We pride ourselves on being a collaborative, mentor-heavy environment where we learn from each other as much as we learn from our customers. Whether we’re architecting a new Security Operations Center (SOC) or prototyping a new automation workflow, we tackle these problems as a team, ensuring that everyone has the support they need to succeed and grow. 

Your Impact: 

As a Senior Software Consulting Engineer, you are the bridge between cutting-edge technology and real-world security outcomes. You will lead high-impact engagements with enterprise customers, helping them design and implement Splunk-based security programs that truly work. 

 You will:

• Lead end-to-end delivery: Manage enterprise security platform deployments, including system architecture, configuration, security content development, and go-live. 

• Design & Automate: Build automated incident response workflows using SOAR technology, integrating third-party tools like EDR, identity platforms, and ticketing systems. 

• Develop Detection Content: Build and tune advanced threat detection rules (e.g., MITRE ATT&CK), risk-based alerting models, and compliance reporting (PCI-DSS, ISO 27001, GDPR, NIST CSF). 

• Data Onboarding: Normalise complex security data sources-firewalls, EDR, cloud platforms-into a centralised monitoring environment. 

• Strategic Advisory: Engage at the CISO and SOC manager level to align technical solutions with business security objectives and present architecture recommendations based on risk and value. 

• Drive Adoption & Innovation: Identify underutilised features, integrate AI/automation to improve response velocity, and collaborate with Cisco product teams to influence future development. 

• Knowledge Sharing: Develop reusable tools, playbooks, and documentation while mentoring junior consultants to elevate the entire practice. 

• Pre-Sales Support: Contribute to technical scoping and the development of Statements of Work (SOW). 

• Available for travel - up to 30%

Minimum Qualifications: 

• Bachelor's degree + 7 years of related experience, OR Master's degree + 4 years, OR PhD + 1 year, OR equivalent relevant work experience. 

• Professional-level certification (e.g., CCNP), DevOps/automation certification or equivalent knowledge 

• 5+ years of hands-on software implementation experience in a customer-facing professional services role 

• Proven technical expertise in XDR/SIEM and monitoring platforms (e.g., Checkmk, Elasticsearch, Dynatrace, AppDynamics, IBM QRadar), security content development, and security automation/orchestration 

• Experience with scripting or programming (Python, Java, .Net or other), REST APIs, and workflow automation. 

• Experience leading complex customer programs and communicating technical recommendations to CISO, architect, and engineering audiences. 

Preferred Qualifications 

• Certifications: Professional-level networking or security certifications (e.g., CCNP, CISSP, CEH, GIAC GCIH). 

• Automation/DevOps: Cisco DevNet or equivalent automation certifications; experience with CI/CD pipelines, Infrastructure as Code (IaC), or DevSecOps practices. 

• Splunk Expertise: Hands-on experience with Splunk Enterprise Security, Splunk SOAR/Phantom, or equivalent enterprise SIEM/SOAR platforms. (Splunk-specific certifications are a significant advantage). 

• Background in SOC operations, incident response, threat hunting, or detection engineering. 

• Experience delivering compliance programs (PCI-DSS, ISO 27001, NIST CSF, GDPR). 

• Familiarity with platforms like Microsoft Sentinel, IBM QRadar, Palo Alto XSOAR, or Google Chronicle. 

• Languages: Proficiency in an additional European language (Polish, German, French, or Arabic) is an advantage.