Cloud Security Operations Engineer

Cisco; Ann Arbor (MI); On-site; USD 129,000 - 185,000; Full time

Job summary

Cisco is seeking a seasoned SecOps professional to join the SBG SecOps team in a high-impact security operations role. You will drive vulnerability management, incident response, and threat hunting across cloud and on‑prem environments, collaborating with engineers, researchers, and developers in a diverse team.

The position emphasizes automation, SLAs, and MITRE ATT&CK mappings. You will analyze SIEM telemetry, author postmortems, and leverage AI/LLM tools to enhance detections, investigations,

Qualifications

• 4+ years in a dedicated SOC, cloud security, or IR role in a modern enterprise.
• Experience with AWS, Azure and GCP cloud architectures.
• Experience managing vulnerability lifecycles and remediation in microservice environments.
• Experience in incident response per NIST SP 800-61 / ISO standards.
• Experience analyzing logs and telemetry in enterprise SIEMs (Splunk) and Linux logs.
• Proven ability to author postmortems and SOPs with clear communication.
• Experience leveraging AI/LLMs for alert enrichment and automation.

Responsibilities

• Manage, triage, and validate findings across container, host, and cloud infra scanners.
• Prioritize vulnerabilities, validate false positives, and enforce remediation SLAs.
• Act as Incident Commander during critical security incidents and coordinate response.
• Lead cross-functional triage calls and coordinate containment, forensics, and postmortems.
• Analyze telemetry to detect adversary tactics mapped to MITRE ATT&CK.
• Develop threat hunts and convert findings into permanent detections and alerts.
• Partner with governance teams to collect evidence for compliance audits.
• Engineer automated workflows, runbooks, and Python scripts to reduce toil.
• Leverage AI/LLM tooling to accelerate triage workflows and threat analysis.

Skills

SOC experience

Cloud security

Vulnerability management

Incident response

SIEM analysis

Log analysis

Postmortems

AI/LLMs for security

Education

Bachelor’s degree in Cybersecurity or Information Systems

Tools

Jira

GitHub

Kubernetes

Wiz

Falco

REST APIs

Splunk

Job description

Cisco is seeking a seasoned SecOps professional to join the SBG SecOps team in a high-impact security operations role. You will drive vulnerability management, incident response, and threat hunting across cloud and on‑prem environments, collaborating with engineers, researchers, and developers in a diverse team.

The position emphasizes automation, SLAs, and MITRE ATT&CK mappings. You will analyze SIEM telemetry, author postmortems, and leverage AI/LLM tools to enhance detections, investigations,