Software Engineer – Cloud Platform- Splunk

The application window is expected to close on: 12/30/2026 Meet the Team We are an agile engineering team building AI-native capabilities for cybersecurity operations. Our work combines security telemetry, distributed systems, data platforms, machine learning, and automation to help defenders identify, investigate, and respond to threats more effectively. You will work with software engineers, security subject-matter experts, security researchers, product managers, and platform teams. We value practical experimentation, reliable engineering, thoughtful collaboration, and technology that creates measurable value for security analysts.

Design, implement, test, and operate a defined service, data pipeline, or platform component supporting AI-enabled security detection and investigation. Build reliable backend services, APIs, and automation workflows, primarily using Python and other modern engineering technologies. Process and normalize security telemetry such as endpoint events, network activity, authentication records, or cloud audit data. Contribute to correlation, enrichment, retrieval, and context-generation capabilities that produce useful and explainable security findings. Prototype focused AI features using existing models, retrieval systems, embeddings, or agent frameworks. Create measurable tests and evaluations for accuracy, reliability, latency, cost, and operational usefulness. Participate in technical design reviews, code reviews, automated testing, CI/CD, documentation, and production-readiness activities. Troubleshoot issues across software, data, and service integrations and help improve system observability and reliability. Partner with product managers, security SMEs, researchers, and engineers to clarify requirements and deliver incremental improvements. Participate in production support or on-call responsibilities, where applicable to the team’s operating model.

Bachelor’s degree in Computer Science, Engineering, or a related technical field with 4+ years of professional software engineering experience. Experience developing backend services, APIs, data-processing systems, or distributed software. Experience with Python and Python-based systems. Experience with software development fundamentals, including design, testing, debugging, code review, version control, and CI/CD practices. Experience working with structured or semi-structured event data, logs, metrics, or telemetry.

Experience building data ingestion, parsing, normalization, enrichment, or correlation pipelines. Familiarity with distributed storage, data lakes, warehouses, streaming systems, or event-driven architectures. Experience with security operations, SIEM, TDIR, threat detection, threat hunting, triage, or incident response workflows. Experience with retrieval-augmented generation, vector search, embeddings, knowledge graphs, or model integrations. Experience designing evaluations for AI/ML systems, including quality, safety, latency, cost, and user trust. Experience with cloud platforms, containers, Kubernetes, observability, or production service operations. Familiarity with AI-assisted software development or agentic engineering tools. Experience developing secure, privacy-conscious, and resilient enterprise software. Strong written and verbal communication skills and the ability to collaborate across engineering and non-engineering disciplines. Ability to learn security operations concepts and apply feedback from security experts to software designs. undefined undefined Why Cisco?  At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire