Security Operations Engineer: Threat Hunting & Incident Response

Cisco Systems, Inc.; Clegg (NC); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with Cisco matching

Paid parental leave

Job summary

Cisco Systems, Inc. is seeking a seasoned Security Operations professional to join the SBG SecOps team. You will manage vulnerability findings, perform threat hunting, and coordinate incident response across enterprise environments including cloud, on-prem, and hybrid deployments.

The role emphasizes automation, AI-assisted triage, and collaboration with engineers, researchers, and governance teams. Strong communication and incident leadership are essential.

Qualifications

• 4+ years in a SOC, Cloud Security, or IR role in a modern enterprise.
• Experience with AWS, Azure and GCP.
• Experience with vulnerability management pipelines and CVSS/EPSS scoring.
• IR experience following NIST SP 800-61 / ISO standards.
• Experience with enterprise SIEMs (Splunk) and Linux logs.
• Strong written and verbal communication; postmortems/SOPs.
• Experience with AI/LLM for alert enrichment or automation.

Responsibilities

• Operate as an Incident Commander during high-severity Cisco SecOps incidents.
• Lead cross-functional triage calls and containment strategies.
• Coordinate forensics and postmortem retrospectives.
• Analyze telemetry to detect adversary tactics mapped to MITRE ATT&CK.
• Develop automated detections and alerting rules from hunt findings.
• Collaborate with governance teams for compliance evidence.
• Engineer automated workflows and runbooks to reduce bottlenecks.

Skills

Security operations

Cloud security

Incident response

Threat hunting

Telemetry & log analysis

AI/LLM tooling

Communication

Education

Bachelor's degree in Cybersecurity / Information Systems

Tools

Splunk

Jira

GitHub

Python

Job description

Cisco Systems, Inc. is seeking a seasoned Security Operations professional to join the SBG SecOps team. You will manage vulnerability findings, perform threat hunting, and coordinate incident response across enterprise environments including cloud, on-prem, and hybrid deployments.

The role emphasizes automation, AI-assisted triage, and collaboration with engineers, researchers, and governance teams. Strong communication and incident leadership are essential.