Elite Threat Hunter & Forensic Investigator

Cisco Systems, Inc.; Clegg (NC); On-site; USD 131,000 - 175,000; Full time

Job summary

Cisco Systems, Inc. seeks a Threat Hunter to join a highly specialized security unit in an onsite environment. You will craft hypothesis-driven hunts, develop Splunk-based detections, and perform end-to-end host and network forensics to uncover and neutralize threats.

You will mentor analysts, brief findings to engineering and leadership, and help elevate the team's intelligence and readiness. A TS/SCI clearance and 4+ years of related experience are required.

Qualifications

• Active TS/SCI clearance, in scope, at time of hire.
• 4+ years of combined experience in threat hunting, incident response, detection engineering, or Tier 2+ SOC analysis.
• Proficiency querying and building content in an enterprise SIEM, specifically Splunk (SPL).
• Practical knowledge of Windows and Linux internals, TCP/IP, and common application-layer protocols.
• Scripting proficiency in Python, PowerShell, or Bash for enrichment and automation.

Responsibilities

• Build and execute hypothesis-driven hunt campaigns based on adversary tradecraft to identify and neutralize hidden threats.
• Build durable detection logic in Splunk and map coverage against the MITRE ATT&CK framework to ensure detailed security visibility.
• Perform end-to-end host and network forensics to determine root causes and drive effective incident containment and eradication.
• Brief technical findings to both engineering peers and leadership to translate sophisticated investigation data into actionable organizational insights.
• Mentor junior analysts and develop robust playbooks to improve the collective maturity and readiness of the security team.

Skills

Threat hunting

Incident response

Detection engineering

SOC analysis

Windows internals

Linux internals

Networking TCP/IP

Python scripting

PowerShell scripting

Bash scripting

Tools

Splunk (SPL)

Job description

Cisco Systems, Inc. seeks a Threat Hunter to join a highly specialized security unit in an onsite environment. You will craft hypothesis-driven hunts, develop Splunk-based detections, and perform end-to-end host and network forensics to uncover and neutralize threats.

You will mentor analysts, brief findings to engineering and leadership, and help elevate the team's intelligence and readiness. A TS/SCI clearance and 4+ years of related experience are required.