SPLK-5002 — Splunk Certified Cybersecurity Defense Engineer
Splunk's advanced cybersecurity engineering cert covering detection rule development, Splunk ES configuration, SOAR integration, and security content engineering — building and tuning the tools rather than just using them. Targets detection engineers and senior SOC engineers who build the security infrastructure rather than investigate alerts. Pure MCQ exam which is a significant weakness for a cert at this level. Not DoD 8140 approved. A valuable credential for practitioners maintaining and building out Splunk-based security programs, though the MCQ format means practical Splunk engineering skill is assessed indirectly at best.
| Issuer | Splunk (Cisco) |
|---|
| Level | expert |
|---|
| Domains | Defensive Security / SOC |
|---|
| Practical weight | 0% |
|---|
| Cost (USD) | 130 |
|---|
| Renewal | 3 years |
|---|
| Skills | splunk_es_configuration, detection_rule_development, siem_tuning, security_content_engineering, splunk_soar_basics, correlation_search_development, threat_intelligence_integration |
|---|
Official certification page
Browse all 426 cybersecurity certifications on EBCertMap