Customer Delivery Architect | 10+ years, SOC transformation

Cisco
Pune, Bengaluru
Workplace: HybridFull timeFunction: CybersecurityExperience: 10+ yearsEducation: bachelorsSkills: ["Technical leadership","Consulting","Presentation","Mentorship","Technical governance"]

Lead enterprise SOC modernization for Security Operations Center Transformation & Splunk, serving as a chief technical authority from strategy through delivery. You’ll design target operating models and multi-tier SOC architectures aligned to MITRE ATT&CK, architect Splunk Cloud/Splunk ES deployments, and modernize SIEM/telemetry pipelines using Cribl Stream and MinIO. Hands-on engineering includes Splunk SOAR automation with Python playbooks, troubleshooting complex SPL/search pipelines, and providing governance to delivery pods.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Cisco
Cisco
1 day ago

Customer Delivery Architect | 10+ years, SOC transformation

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 16 hours agoStatus: Live

Job Summary

Lead enterprise SOC modernization for Security Operations Center Transformation & Splunk, serving as a chief technical authority from strategy through delivery. You’ll design target operating models and multi-tier SOC architectures aligned to MITRE ATT&CK, architect Splunk Cloud/Splunk ES deployments, and modernize SIEM/telemetry pipelines using Cribl Stream and MinIO. Hands-on engineering includes Splunk SOAR automation with Python playbooks, troubleshooting complex SPL/search pipelines, and providing governance to delivery pods.
Location: Pune, Bengaluru
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Define target SOC architecture and transformation strategy, including Target Operating Model (TOM) and delivery approach for multi-tier SOCs and SIEM modernizations aligned to MITRE ATT&CK.
  • •Architect enterprise Splunk Cloud and Splunk Enterprise Security (ES) deployments, including Risk-Based Alerting (RBA), Data Model Acceleration (DMA), optimized tstats search pipelines, and enrichment and detection update frameworks.
  • •Design telemetry ingestion and storage architecture using Cribl Stream for edge transformation plus MinIO/S3-compatible object storage for SmartStore tiering and compliance archiving.
  • •Engineer security automation and SOAR workflows by defining incident triage/response workflows and building modular Python playbooks in Splunk SOAR (Phantom) with REST APIs.
  • •Provide technical pod leadership and governance across engineering pods, serving as hands-on escalation authority for deep SPL optimization, CIM normalization, and API integrations.

Key Requirements

  • •10+ years designing and deploying enterprise Security Operations Center (SOC) environments and SIEM/SOAR platforms.
  • •5+ years hands-on Splunk architecture/engineering experience across Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES), including correlation search, Data Model Acceleration, and Risk-Based Alerting.
  • •3+ years building security telemetry pipeline engineering with Cribl Stream for log routing/normalization and parsing configurations (props.conf/transforms.conf).
  • •3+ years security orchestration and automation experience creating response playbooks using Splunk SOAR (Phantom), REST APIs, and Python.
  • •Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical industry experience.
Experience:10+ yearsCybersecuritySOC transformationSIEMSOARSplunk
Education:Bachelor's in Computer Science, Cybersecurity, Information Technology
Skills:Technical leadershipConsultingPresentationMentorshipTechnical governance
Certifications:Splunk Enterprise Certified ArchitectSplunk Enterprise Security Certified AdminSplunk SOAR Certified Automation DeveloperCribl Certified Observability Engineer (CCOE)CISSPCCIE SecurityCISMGIAC
Tech Stack:Splunk CloudSplunk Enterprise Security (ES)Splunk SOARUser & Entity Behavior Analytics (UEBA)Cribl StreamMinIOS3SmartStorePythonREST APIsServiceNowMITRE ATT&CKRisk-Based Alerting (RBA)Data Model Acceleration (DMA)TstatsCIMTalosVirusTotalPhantomProps.conf

Company Brief

Cisco
Global technology company that designs, manufactures, and sells networking hardware, telecommunications equipment, and high-technology services and products for enterprises, service providers, and governments worldwide.
Industry: Networking Equipment
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Jose, United States
Founded: 1984
Glassdoor
Glassdoor: 4.0
WebsiteLinkedInGlassdoor