Splunk detection and automation engineering
Splunk's Cybersecurity Defense Engineer credential covers building detections, threat intelligence, and orchestration with Splunk SOAR and Enterprise Security, a close role match for SIEM engineers.
Who it suits
Suits SIEM and detection engineers who build and maintain automated defenses and who operate in a Splunk-centered stack.
Key differences
- Engineering work is done on Splunk Enterprise Security and Splunk SOAR, not a combined Cortex SOC platform.
- It stresses tuning detections and building threat intelligence workflows, while the Palo Alto Networks exam also includes platform deployment and data source onboarding.
- It belongs to a role-based Splunk track that sits between analyst and architect levels.
- Level
- Specialty
- Assessment
- Written
- Study time
- 101-190h
- Listed from
- $130