SecOps Engineer: Incident Response & Threat Hunting

Cisco Systems; Austin (TX); Sur place; USD 129 000 - 185 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision insurance

401(k) with company match

Paid parental leave

Flexible vacation

Résumé du poste

Cisco is hiring for a SecOps role within the Security Business Group in the United States. You will be a core member of the SecOps team, leading vulnerability management, incident response, threat hunting, and automation efforts across cloud and on‑prem environments.

The role requires deep expertise in SIEM, cloud architectures (AWS/Azure/GCP), and incident response, with a focus on automation and AI-assisted workflows to accelerate triage and analysis. On‑site work in Austin, TX is typical.

Qualifications

• 4+ years in a SOC/Cloud Security/IR role within a modern enterprise
• Experience with AWS, Azure, and GCP
• Experience with vulnerability lifecycle management and remediation
• Incident response experience following NIST SP 800-61 / ISO standards
• Experience with log/telemetry analysis in SIEM platforms and Linux logs
• Experience creating postmortems and SOPs; strong written and verbal communication
• Experience leveraging AI/LLMs for alert enrichment and automation

Responsabilités

• Manage, triage, and validate container, host, and cloud findings across enterprise scanners
• Drive vulnerability prioritization, validate false positives, and enforce remediation SLAs
• Serve as Incident Commander during critical security incidents and lead cross-functional triage
• Analyze telemetry to detect ATT&CK techniques, conduct threat hunts, and develop automated detections
• Partner with governance teams to collect evidence for compliance audits
• Engineer automated workflows, runbooks, and scripts to reduce operational bottlenecks and debt

Connaissances

Cloud security

Incident response

SIEM analysis (Splunk)

Python automation

Threat hunting

Formation

Bachelor’s degree in Cybersecurity or related field

Outils

Splunk

Kubernetes

Wiz

Falco

REST APIs

Jira

GitHub

Description du poste

Cisco is hiring for a SecOps role within the Security Business Group in the United States. You will be a core member of the SecOps team, leading vulnerability management, incident response, threat hunting, and automation efforts across cloud and on‑prem environments.

The role requires deep expertise in SIEM, cloud architectures (AWS/Azure/GCP), and incident response, with a focus on automation and AI-assisted workflows to accelerate triage and analysis. On‑site work in Austin, TX is typical.