Lead Detection Engineer—AI-Driven Security

Cisco; United States; Hybrid; USD 151,000 - 191,000; Full time

Benefits offered by this job

401(k) with matching

Paid parental leave

Disability coverage

Life insurance

Job summary

Cisco is seeking a Security Engineer in Detection Engineering to advance our enterprise threat detection capabilities. You will design data pipelines that convert large security telemetry into actionable alerts and leverage AI/ML to outpace adversaries.

The role collaborates with Threat Hunting, SOC, IR, and product teams to drive detection initiatives end-to-end. You will mentor teammates, review code, and deliver production-ready security content across AWS, GCP, and Azure environments.

Qualifications

• Deployed enterprise security content in a production SOC environment.
• Built detection queries in SPL at scale with alerting & baselining.
• Applied AI/ML techniques to detection pipelines in security.

Responsibilities

• Design and build data processing pipelines for security telemetry.
• Develop scalable detection content and reduce false positives.
• Collaborate with SOC, IR, threat intel, and product teams from requirement to deployment.
• Mentor teammates on detection standards and patterns.

Skills

Detection engineering

Python

AI/ML in security

Threat intel

Code reviews

Education

Bachelor’s degree + 8 years

Master’s degree + 6 years

PhD + 3 years

Tools

Git-based platforms

SPL

Cloud providers (AWS/GCP/Azure)

Job description

Cisco is seeking a Security Engineer in Detection Engineering to advance our enterprise threat detection capabilities. You will design data pipelines that convert large security telemetry into actionable alerts and leverage AI/ML to outpace adversaries.

The role collaborates with Threat Hunting, SOC, IR, and product teams to drive detection initiatives end-to-end. You will mentor teammates, review code, and deliver production-ready security content across AWS, GCP, and Azure environments.