Cisco's Security Operations Team is seeking a Security Operations Engineer to strengthen their security posture. This role sits at the intersection of incident response, vulnerability management, and threat detection, protecting Cisco's product portfolio. The position requires a blend of technical expertise and strong interpersonal skills, emphasizing cross-collaborative work to achieve security goals.
The role involves leading security incident response as an incident commander, working with SIEM systems, managing vulnerability tickets, and participating in 24/7 on-call rotations. You'll be responsible for conducting thorough investigations, building automation scripts, and providing detailed security guidance to engineering teams. The position also includes conducting postmortems, handling audit requirements, and mentoring team members.
Cisco offers an inclusive work environment where employees from diverse backgrounds come together to power an inclusive future. The company pioneered hybrid work trends and provides extensive learning and development opportunities. With a strong focus on community involvement, Cisco offers 80 hours of paid volunteer time annually, and has 30 employee resource organizations fostering belonging and connection.
The ideal candidate should have 7+ years of security operations experience, strong SIEM expertise (particularly Splunk), and proven incident management capabilities. Experience with cloud infrastructures (AWS, GCP, OCI) is preferred, along with excellent documentation skills. The role offers comprehensive benefits including medical, dental, vision insurance, 401(k) with matching, and various time-off policies.