Security Operations Engineer: Threat Hunting & IR

020 Cisco Systems, Inc.; North Carolina; On-site; USD 129,000 - 185,000; Full time

Job summary

Cisco Systems, Inc. is seeking a seasoned Security Operations professional to join our SecOps team in the United States. The role focuses on vulnerability management, incident response, threat hunting, and detection engineering across cloud and on-premises environments.

You will lead cross-functional triage, drive remediation SLAs, and develop automated detections and playbooks. Join Cisco to advance security across critical infrastructure with mentorship and growth.

Qualifications

• 4+ years in a dedicated SOC, Cloud Security, or Incident Response role.
• Experience with cloud architectures (AWS, Azure, GCP) and vulnerability lifecycles.
• Experience in incident response following NIST/ISO standards.
• Experience with log/telemetry analysis in enterprise SIEMs (Splunk).
• Strong written and verbal communication; capable of postmortems and SOPs.
• Familiarity with AI/LLMs for alert enrichment and automation.

Responsibilities

• Lead vulnerability triage, prioritization, and remediation across PM/QE queues.
• Act as Incident Commander during critical security incidents and drive containment.
• Perform threat hunting and map detections to MITRE ATT&CK.
• Coordinate audits and governance evidence with compliance teams.
• Develop automated workflows, runbooks, and detection rules using Python.

Skills

SOC/IR experience

Cloud security (AWS/Azure/GCP)

Vulnerability management

Incident response

Log/telemetry analysis

Postmortems & SOPs

AI/LLMs for automation

Education

Bachelor's degree in Cybersecurity/Info Systems

Tools

Splunk

Kubernetes

Wiz

Falco

Linux logs

Job description

Cisco Systems, Inc. is seeking a seasoned Security Operations professional to join our SecOps team in the United States. The role focuses on vulnerability management, incident response, threat hunting, and detection engineering across cloud and on-premises environments.

You will lead cross-functional triage, drive remediation SLAs, and develop automated detections and playbooks. Join Cisco to advance security across critical infrastructure with mentorship and growth.