SPLK-5002 — Splunk Certified Cybersecurity Defense Engineer
IntermediateActiveGrowing
60 MCQ, 75 min, professional level, valid 3 years. Detection engineering (40%, incl. risk-based detections), data engineering, automation with Splunk ES and SOAR. Exam code SPLK-5002 from common usage. AI features not explicitly in blueprint.
- Issuer
- Splunk (Cisco)
- Industry
- Cybersecurity
- Domain
- Security Operations
- Level
- Intermediate
- Exam fee
- $130 — July 2024 roadmap snapshot, unverified
Prerequisites & eligibility
No formal prerequisites are published; anyone can register for the exam.
Renewal & maintenance
Renewal policy not catalogued yet — verify with the issuer.
Recognition
Professional-level Splunk detection/automation cert; successor path for the legacy ES Admin and SOAR Developer certs.
Related certifications
- C-ADPenX The SecOps Group Certified Active Directory Pentesting eXpert
- CAWFE IACIS Certified Advanced Windows Forensic Examiner
- CBTeamerX The SecOps Group Certified Blue Teamer - eXpert
- CCDL2 Threat Hunting & DFIR Certification (CCDL2, formerly Certified CyberDefender / CCD)
- CCPenX-AWS The SecOps Group Certified Cloud Pentesting eXpert-AWS
- CCPenX-Az The SecOps Group Certified Cloud Pentesting eXpert - Azure
Career paths that include SPLK-5002
- AI-Driven Security Operations — Advanced phase