Last updated: July 2026
Acquired by Cisco for $28 billion in 2024, Splunk is an 11-time Gartner SIEM Leader used by 90+ Fortune 100 companies to power security and observability. That context sets the intern opportunity. For the 2027–2028 cycle (you apply September 2027, you intern summer 2028), Splunk posts roles in early September through Cisco's careers portal and hires rolling through February. So the calendar, and your application timing within it, decides your odds.
Quick Facts
| Fact | Detail |
|---|---|
| Where to apply | careers.cisco.com/splunk. Filter by 'Early Career' or 'Intern' and set a job alert for September |
| Application window (2027–28) | Expected September 2027 through February 2028, rolling. Projected from prior cycles, not yet posted |
| Rolling? | Yes, confirmed. Splunk posts roles in early September and fills them progressively through February. Apply in the first weeks |
| Eligibility | Enrolled in a Bachelor's, Master's, or PhD with at least one semester remaining after the internship. CS, SWE, CE, EE, Math, Data Science, Cybersecurity, or related fields for technical tracks |
| Duration | 12 to 14 weeks, full-time, in the US (international programs range from 4 months to 1 year) |
| Compensation | SWE intern $42 to $60/hr ($7,280 to $10,400/mo) depending on location. Housing stipends $2,000 to $6,000 for select offices |
| Visa sponsorship | Roles available in US, Canada, UK, Germany, Poland, Australia, Japan, Singapore. US roles likely require valid work authorization (CPT for F-1 students) |
| Locations | San Francisco, San Jose, Boulder, Plano TX, McLean VA, Seattle, plus international offices in Vancouver, London, Krakow, Melbourne, Tokyo, Singapore |
| # Programs | 7 to 8 technical tracks (SWE, C++, IoT, Solutions Engineer, Security, Data Science, PM, UX) plus business functions (Sales, Marketing, Legal, HR) |
Two things matter most: Splunk hires rolling from September through February, and SWE interns earn $42 to $60 an hour depending on location. No published GPA floor, no acceptance rate, so timing and technical proof do the work.
Externships are short, remote projects where you finish real work for a real company. The Wayfair AI Agent Engineering Externship and Hydroficient IoT Cyber Defense Externship build the backend engineering and security evidence a Splunk application rewards. Explore all Externships.
What Is a Splunk Internship?
A Splunk internship is a paid, full-time placement, 12 to 14 weeks in the US, that puts students on real product teams across security, observability, and data infrastructure. Splunk was acquired by Cisco for $28 billion in March 2024, the largest deal in Cisco's 40-year history, and the Splunktern program continues under the Splunk brand. The reviews hold up: 4.0 out of 5 on Glassdoor across 1,953 reviews, 88% of employees say it's a great place to work, and 98% of interns would recommend Splunk as an internship experience. The program's stated goal is to build a talent pipeline into full-time roles.

When Do Splunk Internship Applications Open for 2027–2028?
Splunk's calendar is consistent: roles post in early September, recruiting runs through February, and summer starts in May or June. For summer 2028 you apply starting September 2027. The official Splunk FAQ confirms they post roles 'in the beginning of September' and attend campus events September through February. Rolling review means the date you submit matters more than the date you polish your resume.
Applications for summer 2028 are roughly 14 months away. This is the build window: your resume when a September 2027 posting opens decides whether rolling review reaches you.
Resume, project, and LeetCode-medium prep season. Drill Python and Java, practice arrays, strings, hash maps, and linked lists. Prepare 4 to 6 STAR stories covering teamwork, ambiguity, and technical problem-solving.
Splunk intern roles expected to go live on careers.cisco.com. Review is rolling from the moment a posting appears, so apply in the first one to two weeks to face the most open seats.
The funnel: recruiter phone screen, then Karat technical assessment (MCQ quiz plus 60-minute live coding), then hiring manager interview, and for some roles a virtual onsite loop. Offers roll out November through March.
12 to 14 weeks, full-time, starting mid-May to mid-June. The Splunktern program is explicitly designed as a pipeline to full-time, so perform like the return offer is on the table.
Why You Must Apply the Week Applications Open
Rolling is not a detail, it's the whole game. Splunk posts roles in early September and fills them progressively through February. Earlier applicants face more open seats and less competition. The process from application to offer takes 3 to 5 weeks once screening begins, so an October applicant may interview when a September applicant already has an offer. Set an alert on careers.cisco.com, and apply the week a role opens.
Which Splunk Internship Programs Should You Target?
Splunk runs 7 to 8 technical internship tracks plus business functions. Since the Cisco acquisition, roles are posted through Cisco's careers portal but retain the Splunk brand. Which track should you target? The honest answer is the one whose skills you can already evidence, because the Karat assessment and hiring manager interview evaluate you against that role's requirements.
| Program | Focus | Duration | Key skills |
|---|---|---|---|
| Software Engineering Intern (Backend/Full-Stack) | APIs, cloud infrastructure, observability, and enterprise security platform development | 12–14 weeks (US) | Python, Java, Go, data structures, REST APIs |
| C++ Software Engineer Intern | Core platform and indexer performance optimization, low-level systems programming | 12–14 weeks (US) | C++, memory management, multithreading |
| Solutions Engineer Intern | Pre-sales technical role: customer-facing presentations, product demos, workshops | 12–14 weeks (US) | Splunk product knowledge, communication, technical aptitude |
| Security Engineering Intern | Vulnerability analysis, penetration testing, security audits aligned with SIEM/SOAR products | 12–14 weeks (US) | SIEM/SOAR concepts, MITRE ATT&CK, security frameworks |
| Data Science Intern | ML and AI applied to security detection, anomaly identification, and observability analytics | 12–14 weeks (US) | Python, scikit-learn, statistical modeling, ML |
| Product Manager Intern | Cross-functional feature definition and roadmap development for Splunk Cloud, SOAR, or Observability | 12–14 weeks (US) | Product thinking, user feedback, data-driven decisions |
See every open track on the Cisco careers portal for Splunk. Additional functions include Sales, Marketing, IT, Legal, and HR. International programs in Canada, UK, and elsewhere run 4 months to 1 year.
What Are the Eligibility Requirements?
Splunk's requirements repeat across most intern postings:
• Enrollment: currently enrolled in a Bachelor's, Master's, or PhD program at an accredited university, with at least one semester or quarter remaining after the internship ends.
• Majors: Computer Science, Software Engineering, Computer Engineering, Electrical Engineering, Mathematics, Data Science, Cybersecurity, Information Systems, or related technical fields for engineering tracks. Business, Marketing, or Design for non-technical tracks.
• International students: roles available in multiple countries (US, Canada, UK, Germany, Poland, Australia, Japan, Singapore). US roles likely require valid work authorization such as CPT for F-1 students.
• Post-acquisition note: since March 2024, Splunk intern roles are posted through Cisco's careers portal but retain the Splunk brand in job titles.

Does Splunk Have a GPA Cutoff?
No universal minimum GPA is stated for general internship roles. The HBCU Academic Scholarship ($10,000 per student, $500K awarded to date), which feeds into the internship pipeline, requires a 3.0+ cumulative GPA. But for general intern roles, strong projects and technical skills weigh more than GPA alone. Splunk uses a school-agnostic approach, running virtual events and tech talks rather than targeting only elite programs.
What Skills Does Splunk Look For, and How Do You Build Them?
Read across Splunk intern job descriptions and interview sources, and the pattern is clear. Python appears in nearly every technical posting, followed by Java, data structures and algorithms, SQL, and distributed systems fundamentals. But the skill list only tells half the story. Splunk's domain is data-at-scale: log ingestion, SIEM, observability, and cloud infrastructure. So interviewers expect you to understand not just how to code, but why data pipelines, security detection, and distributed tracing matter.
What Splunk looks for in interns
Skills across 8 Splunk intern & analyst job descriptions · 2024–2026 cycle Splunk intern JDs and interview sources, projecting 2027–2028
Method: full-text analysis of eight Splunk intern job descriptions and interview sources (Cisco Careers, Prosple, InternGrab, TechPrep, Prepfully). Prior-cycle basis; security frameworks (MITRE ATT&CK, NIST) are evaluated in security-specific roles rather than all JDs, so they sit alongside this chart, not inside it.
How Is Demand for Software Engineering Interns Moving Right Now?
Software engineering intern hiring right now: July 2026
Across US software-engineer-intern postings tracked this week · aggregate market data, all employers
July 2026 is this tracker's baseline month, so month-over-month shifts show up at the August update. The signal today is level: intern demand is steady, and the ML-heavy end of it pays more.
Method: aggregate analysis of US software-engineer-intern, machine-learning-intern, and software-engineer postings via Adzuna, July 2026 baseline. The sample indexes a fraction of all US postings, so figures show direction and relative level, not total market share.
Build These Skills Before You Apply
And every skill in that chart maps to a remote Externship where you finish a real project before a role opens.
| Skill (from real JDs) | JD evidence | Externship that builds it |
|---|---|---|
| Python, backend engineering & distributed systems | SWE JDs: "APIs, Python/Java/Go, CI/CD pipelines" and cloud infrastructure teams | Wayfair AI Agent Engineering |
| Security concepts, IoT & system hardening | Security JDs: "vulnerability analysis, penetration testing, system audits" aligned with SIEM/SOAR | Hydroficient IoT Cyber Defense |
| Data analysis, SQL & metrics-driven decisions | Data Science JDs: "predictive modeling, pattern recognition, ML implementation" | Beats by Dre Data Analytics |
How close is the overlap? The Wayfair project is agent-engineering work that yields the build-and-explain evidence Splunk's backend teams probe for, and the Hydroficient project ends on the IoT security and system-hardening story a SIEM company wants to hear.
What Is the Splunk Application and Interview Process Like?
Splunk's funnel runs 3 to 5 weeks from initial contact to offer, with a technical assessment outsourced to Karat:
1. Apply on careers.cisco.com/splunk. Filter by 'Early Career' or 'Intern' roles with the 'Splunk' keyword. No cover letter required for most roles, but recommended.
2. Recruiter phone screen (15 to 30 minutes). Logistics, background verification, motivation, and timeline check.
3. Karat technical assessment (about 75 minutes total). A short multiple-choice quiz on backend fundamentals (about 15 minutes) plus a 60-minute live coding session with a Karat engineer via shared code editor. Typically 2 problems at LeetCode easy-to-medium level: arrays, strings, hash maps, linked lists, binary search.
4. Hiring manager interview (45 to 60 minutes). Behavioral and resume-focused, STAR format. Topics: why Splunk, past projects, teamwork, handling pressure. For some roles, a virtual onsite with 2 to 4 additional rounds follows.
5. Offer decision. Typically within 1 to 2 weeks after the final round.
So the two skills to drill are clear: data-structures fluency for the Karat assessment (Python, Java, C++, or Go accepted), and 4 to 6 STAR stories that show technical problem-solving and collaboration. The Karat assessment can be retaken, but first impressions carry weight.
What Students on Reddit Say
Three community threads show the process from the inside, all paraphrased.
Splunk's intern interview typically starts with a recruiter screen, then one or two technical rounds focused on data structures and system design basics. Interviewers care more about your problem-solving approach than getting a perfect answer, so talk through your thinking out loud and ask clarifying questions early.
Splunk (now under Cisco) offers competitive intern pay and solid perks. If you are choosing between a niche networking company and Splunk, go with whichever team gives you more ownership over a real project, because the brand recognition and security/observability domain knowledge from Splunk translate well on a resume.
Interns at Cisco/Splunk tend to get meaningful SWE work with a supportive team culture and better work-life balance than big-tech grind roles. If your goal is deep engineering growth over pure name recognition, Splunk can be the stronger choice because you ship features that go into production rather than doing maintenance tasks.
How Do You Stand Out at a Company With 98% Intern Satisfaction?
Three moves, all before a role opens. First, apply in week one of September: rolling review plus a Karat skills gate means timing and prep beat prestige. Splunk uses a school-agnostic approach, so your project portfolio matters more than your school name. Second, clear the Karat on purpose: drill LeetCode easy-to-medium problems in Python or Java until arrays, strings, hash maps, and linked lists are automatic. The community says the assessment is moderate, not FAANG-level, but edge cases and efficiency still matter. Third, bring domain-relevant stories: Splunk lives in the SIEM, observability, and data infrastructure world, so 'tell me about a time you worked with large-scale data' or 'describe a security challenge you solved' gets a deliverable, not a hypothetical.

What Other Companies Should You Consider?
Splunk isn't the only company hiring interns in the security, observability, and data infrastructure space. If you're building a tech-internship list, these are the obvious neighbors:
- CiscoSplunk's parent company since 2024; overlapping recruiting pipeline and careers portalGuide →
- Datadogdirect observability competitor; cloud-native monitoring and APMGuide →
- CrowdStrikecybersecurity leader; endpoint detection and threat intelligenceGuide →
- Snowflakedata cloud platform; overlapping data infrastructure skillsGuide →
- Palantirdata analytics and security; government and enterprise focusGuide →
Our tech internships summer 2027 guide maps the whole landscape, timeline by timeline.

FAQ
When do Splunk internship applications open for summer 2028?
Expect roles to post on careers.cisco.com in early September 2027, with rolling hiring continuing through February 2028. Those dates are projected from prior cycles and aren't official yet. Set a job alert on the Cisco careers portal filtering for Splunk intern roles.
Is Splunk internship hiring rolling?
Yes, and it's the most important fact here. Splunk posts roles in early September and fills them progressively through February. Apply within the first one to two weeks to face the most open seats. The official Splunk FAQ confirms this pattern.
How hard is it to get an internship at Splunk?
Moderately competitive. Glassdoor rates interview difficulty at 3.1 out of 5, and 55% of candidates report a positive experience. Splunk uses a school-agnostic approach and hires from diverse backgrounds rather than exclusively targeting top-tier programs. The Karat assessment is LeetCode easy-to-medium level.
How much do Splunk interns get paid?
SWE interns earn $42 to $60 per hour ($7,280 to $10,400 per month) depending on location, with Bay Area roles commanding the highest rates. Housing stipends range from $2,000 to $6,000 depending on location and cycle. Some offices provide corporate housing or transit passes.
Does Splunk still hire interns after the Cisco acquisition?
Yes. Splunk continues hiring interns under the Splunk brand through Cisco's careers portal at careers.cisco.com. The Splunktern program name and structure remain intact, and Cisco was recognized as a Top 100 Internship program in 2025.
What programming languages should I know for a Splunk SWE internship?
Python is most versatile across backend and ML teams. Java is used extensively in enterprise backend. Go is emerging for cloud-native services. C++ is critical for core platform and indexer work. SQL knowledge is essential given Splunk's data processing focus.
What is the Splunk interview process like?
A recruiter phone screen (15 to 30 minutes), then a Karat technical assessment (15-minute MCQ quiz plus 60-minute live coding), then a hiring manager behavioral interview (45 to 60 minutes). Some roles add a virtual onsite with 2 to 4 additional rounds. Total timeline is 3 to 5 weeks from first contact to offer.
Do Splunk interns get return offers?
Splunk's official statement is that the internship program exists to 'create a talent pipeline' for full-time hiring. Interns have been included on patents and presented at conferences. A specific conversion rate is not published, but the program's pipeline focus and 98% intern recommendation rate suggest strong retention intent.
Splunk's Karat assessment is moderate, its culture scores high, and every seat is won on a rolling basis starting in September. Spend the runway building proof: a remote Externship turns 'interested in Splunk' into a finished project you can point at.
About the Author
Bifei Wang has spent 17 years focused on human flow and the growth of young professionals, spanning international education, career training and coaching, and recruitment process outsourcing. Over 7 years at Extern, he has had one-on-one sessions with thousands of students exploring careers in consulting, finance, tech, marketing, and data, giving him a firsthand view of how the job market has shifted for early-career professionals and what it actually takes to break in.



