Security Threat Researcher, Splunk

$117.1-201.3k

Salary dependent on location + Incentive compensation + may be eligible for equity or long-term cash awards

HTML

JavaScript

Python

JSON

Junior and Mid level

Remote in US

More information about location

Data security & observability platform

Be an early applicant

Data security & observability platform

1001+ employees

B2BArtificial IntelligenceDeep TechAnalyticsInternet of ThingsMachine LearningSaaSCyber Security

Be an early applicant

$117.1-201.3k

Salary dependent on location + Incentive compensation + may be eligible for equity or long-term cash awards

HTML

JavaScript

Python

JSON

Junior and Mid level

Remote in US

More information about location

1001+ employees

B2BArtificial IntelligenceDeep TechAnalyticsInternet of ThingsMachine LearningSaaSCyber Security

Company mission

To allow clients to focus on the business outcomes that data can deliver by helping organisations use their data to answer questions, take actions, and achieve business objectives

Job

Company

Role

Who you are

Minimum 2 years of experience as a detection engineer, security researcher, or threat analyst
Bachelor’s degree in Computer Science or a related quantitative field (equivalent education/experience considered)
Deep understanding of the modern phishing landscape, including threat actors, phishing kits, AITM/Reverse Proxy frameworks, and related techniques
Proficiency in writing phishing detections using various technologies (e.g., Regex,, ClamAV, Suricata)
Expertise in creating complex regular expressions for detection
Familiarity with typical phishing kit structures
In-depth knowledge of HTML, Javascript, and the HTTP protocol
Proficiency in JSON
Excellent verbal and written communication skills
Proficiency in Python or Go

Desirable

Knowledge of common network protocols (FTP, SMTP)
Familiarity with the MITRE ATT&CK Framework and other relevant attacker tactics, techniques, and procedures (TTPs)

What the job involves

Stay informed about the current phishing landscape and develop effective detections to protect our customers
Review a large number of potential phishing websites daily to determine if new detections need to be created, or existing detections need tuning
Collaborate with developers to identify and resolve issues, missing features, and enhance phishing-related detection capabilities
Investigate and respond to detection related issues reported by customers

Our take

Splunk was founded to produce software for searching and analysing machine-generated data for clients. The platform provides live data insights and is an attractive option due to its flexibility, scalability and ability to process real time data.

The company has evolved significantly since being founded, implementing developments in augmented reality, machine learning and mobile technology. Further, the company's transition to the cloud has allowed it to provide new offerings, and proved its ability to move with market trends.

Acquired by Cisco in 2024, Splunk now benefits from Cisco's user protection, breach protection and threat intelligence capabilities. The company will continue to deliver its security products, and also has plans to enhance its portfolio moving forwards.

Kirsty

Company Specialist at Welcome to the Jungle

Insights

Top investors

Few candidates hear
back within 2 weeks

3% employee growth in 12 months

Company

Funding (last 2 of 3 rounds)

Sep 2007

$25m

SERIES C

Jan 2006

$10m

SERIES B

Total funding: $40m

Company benefits

Paid parental leave
Work from home opportunities
Health Care and Insurance
Paid Time Off
Education reimbursement
Electric car charging stations
Employee Assistance Program (EAP)
Stocked kitchens
Gym discounts/onsite fitness centers
Pet insurance discount
Student loan resources
Cool workspace with collaborative environments
529 College Savings Plan

Company values

Innovative: Splunk values people committed to improving the future
Fun: Splunk believes in fostering a positive atmosphere and celebrating its successes
Disruptive: Splunk is always looking for ways to be more efficient and better
Open: Splunk values honesty and inclusivity, with an open-door policy
Passionate: Passion for its customers and products is what drives Splunk to keep improving

Company HQ

South Beach, San Francisco, CA

Articles

Leading Business Transformation At Scale At Splunk

Splunk CEO Gary Steele in for the long haul, ANZ region growing under Mark Troselj

Cisco Completes $28 Billion Splunk Acquisition

Leadership

Gary Steele

(EVP & GM of Splunk at Cisco, not founder)

Was CEO and President of Splunk before it became a Cisco company. Previously CEO at Proofpoint and Portera, VP at Sybase, and Market Development Manager at Sun Microsystems.

Diversity, Equity & Inclusion at Splunk

Our diversity, equity and inclusion strategy is built on three key pillars: growing a diverse workforce, nurturing our culture of inclusion in the workplace, and driving positive change in the marketplace for Splunkers, customers and partners
We are committed to recruit, retain and develop high-performing, innovative and engaged Splunkers with diverse backgrounds and experiences. We created the DEI at Splunk Council (DISCO) to set and track progress on diversity, equity and inclusion across all functions and geographies
We have also implemented processes, tools and education to try to prevent unconscious bias across our hiring and talent recruitment processes. It has also given us a company-wide vernacular to label bias where we see it
We know that Splunkers are made up of a million different data points. And we’re committed to cultivating a culture of inclusion and making Splunk a place where everyone can thrive
Our Employee Resource Groups (ERGs) provide community for underrepresented groups and allies, offering support, mentoring and networking opportunities. We now have nine employee-led ERGs, including Pride, Womxn +, Veterans, Somos (Latinx), Black Employees and Mentors (BEAMs), Disabled=*True, Pilipinx, Natives, and Neurodiversity

Share this job

View 23 more jobs at Splunk