Threat Hunting & Intelligence Engineer — AI-Driven Security Automation

Cisco Systems, Inc.; Seattle (WA); Hybrid; USD 161,000 - 234,000; Full time

Job summary

Cisco Systems, Inc. seeks a senior cybersecurity professional to lead threat intelligence and hunting within THI. You will deliver actionable intel, develop detections, and build automation that scales incident response.

The role blends tactical intelligence with proactive hunting and engineering collaboration in a hybrid work model. You will mentor teams, apply AI to accelerate analysis, and advance automation across large data sets and cloud/on-prem environments.

Qualifications

• 8+ years in cybersecurity with focus on threat intelligence and/or threat hunting.
• Expertise with Splunk search and reporting; fluent SPL.
• Ability to translate large datasets into actionable insights.
• Understanding attacker behavior; translate intelligence into automation.
• Experience applying AI to accelerate development and analysis.

Responsibilities

• Deliver actionable threat intelligence during active incidents.
• Produce intelligence products to inform hunts and detections.
• Plan and conduct threat hunts including retrospectives.
• Build automation and scripts to scale THI use cases.
• Apply AI to speed intelligence and tooling.
• Uncover activity missed by rules and hand to engineering.
• Craft written reports and responses for audiences.
• Mentor analysts and engineers across TI, hunting, and engineering.

Skills

Threat intelligence

Threat hunting

Splunk SPL

Automation

AI in security

Programming

DevOps

Incident response

Tools

CI/CD tooling

APIs

Job description

Cisco Systems, Inc. seeks a senior cybersecurity professional to lead threat intelligence and hunting within THI. You will deliver actionable intel, develop detections, and build automation that scales incident response.

The role blends tactical intelligence with proactive hunting and engineering collaboration in a hybrid work model. You will mentor teams, apply AI to accelerate analysis, and advance automation across large data sets and cloud/on-prem environments.