Splunk Area Technical Account Manager

Job description

Meet the Team As a Customer Success Security Area TAM, you are passionate about customers and will fuel solutions to ensure every customer request makes the deepest impact possible for our customers and share the best-of-the-best with the team. You will be a Splunk expert and adept at understanding, adapting, and guiding our account teams and customers on how to best use our Platform. Are you up for the challenge? Responsibilities: Highly skilled and aligned to Splunk Security license products, such as Enterprise Security (ES), security applications like Splunk User Behavior Analytics (UBA), and/or SOAR (Security Orchestration, Automation, and Response). Aligned to a specific Area to strategically support the Customer Success Executive, Technical Success Engineer, Solution Engineer, Solution Architect motions. Develop strong partnership with Sales/Customer Success roles to assist Area aligned customers with Value Realization. Activities include, but not limited to: Onboarding & Enablement​ – deliver workshops, prescriptive guidance/assistance, achieve onboarding milestones.​ Health Review & Remediation ​- audit usage, indexes, data models, assets/identities, dashboards, correlation searches, notable events, frameworks, etc. and remediate identified issues​. Security Use Case Activation​ - planning & development of detections/analytics (e.g. identify MITRE ATT&CK coverage gaps, integrate/normalize data, drive CIM compliance, write custom SPL, etc.)​. Feature/Framework/Product Activation ​(e.g. Risk Base-Alerting, Threat Intel, Threat Hunt, UBA/UEBA, SOAR/Automation, etc.). Proactively engaging Customer Success Executives and Solution Architects on Security-related adoption/use case work opportunity. Proactively engaging Technical Success Engineers on health-related work opportunity related to Security products. Scoping the level of effort and developing a technical action plan to address the technical situation based on your assessment. Proactively engage Area aligned CS/SE Management to ensure priority focus alignment and address risk accounts/area themes. Strategic case-based delivery, up to 90 days of assistance, which is requested by internal Area aligned account teams or management. This typically involves providing customers with high-quality technical advice on Enterprise level architecture, implementation, configuration and optimization work in complex environments for Splunk Enterprise Security, UBA/UEBA, and/or SOAR. Customer Success Area TAM, you will: Be passionate about customers and deliver impactful solutions. Address organizations’ complex technical challenges, proactively identifying and resolving issues before they impact the customer. Be a self-motivated Splunk expert eager to learn and adapt in a dynamic environment. Guide account team members and customers on optimal use of the Splunk Enterprise Security, UBA/UEBA, and/or SOAR. Provide recommendations for improving customer’s technical health. Deliver strategic, case-based technical consulting (up to 90 days). Collaborate with internal resources and customer-facing teams to manage customer needs. Conduct research from various resources with the ability to consistently find answers to questions and solve complex technical problems. Execute consultative conversations with decision makers to diagnose and establish the potential value of solving business issues, change or expand existing solution requirements based on your discovery/assessment, and provide broader based recommendations to help customers accelerate their product initiatives, optimize cost, and maximize performance. Gain agreement with account team members and customer decision-makers on the tangible value of proposed solutions. Deliver customer onboarding enablement-based workshops and achieve success milestones. Contribute to practice KPIs through process and collateral improvements, tool development, and implementation. Minimum Qualifications Deep technical knowledge of Splunk Enterprise Security (ES) configuration, administration, and development, including expertise in Assets and Identities, Threat Intelligence, Notable Events, Adaptive Response, and Risk-based Analytics. Data Management: Experience with integrating and normalising data from diverse sources. Understanding of the Common Information Model (CIM) and experience with data onboarding, including forwarding architecture and technical add-ons. Strong command of Search Processing Language (SPL); experience developing and optimizing correlation and risk-based alerting rules. Preferred Qualifications Additional Security Products/Applications: Expertise in UBA/UEBA and/or SOAR. Cybersecurity Domain: Solid foundation in security operations, forensics, threat hunting, insider threats, and compliance. Cybersecurity Frameworks: Solid foundation in NIST CSF, CIS, HIPAA, PCI DSS Industry Standard Security Certifications: GIAC, CISSP, OSCP or equivalent Infrastructure: Understanding of enterprise architecture across on-premise and Cloud environments (AWS, Azure, GCP). Splunk Certifications/Accreditations: ES Implementation Accreditation and/or SOAR consultant I & II Soft Skills Trusted technical advisor with the ability to manage assigned tickets and Area aligned priorities. Engages in “out of the box” thinking to resolve problems Relationship Management - Establish technical credibility with a wide range of internal and customer contacts with the ability to “read” the internal/customer contact and adapt behavior / approach Conflict Resolution - Ability to engage in escalation management Influencing/Negotiating - Ability to influence peers, Splunk leadership and customers. Ability to manage highly complex/distributed IT environments and/or accounts that demand a high level of negotiation and conflict resolution abilities Problem/Need Identification - Demonstrates a deep comprehension of Area management, account team and/or customer’s business strategy, business objectives & challenges, success criteria/how customer measures success, and training needs. Analyzes trends to predict changes that may impact customer’s long-term business goals Mentor/Team Player - Possesses ability to take on mentorship roles as identified by management team. Identifies, defines, and leads Priorities to Improve to help team reach its goals Communication: Excellent written and oral communication skills. Active listening and objective consideration of others’ opinions. Strong customer-facing skills to instill confidence and guide towards resolution. Ability to balance multiple account teams, customers and competing priorities effectively. Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you.