Principal Security Engineer - Threat Detection and Response

What you'll do

As part of the engineering leadership team for Threat Detection and Response (TD&R) portfolio, you'll be instrumental in guiding security focused innovation for Cisco's XDR (Extended Detection and Response) product. You'll educate engineering teams on the product security landscape and how to solve it effectively. You'll speak to customers about their security problems rather than their existing solutions to drive towards next. To bring it all together, you will develop new processes and techniques to leapfrog Cisco XDR not just past competitors, but the adversary as well. Your responsibilities will include:

• Competitor assessments of XDR solutions
• Understanding customer issues and developing proof-of-concepts for XDR solutions to solve their problems
• Collaborate with product teams to take Proof of Concepts to generally available product or features

Who you'll work with

The TD&R engineering team is composed of highly skilled individuals who work in a fast-paced and technically fulfilling environment. Members are involved in all facets of product development from solving complex engineering problems to working directly with customers.

Who you are

You are a security practitioner at heart who has thrived in a security-conscious environment. You've worked in or led security operations, have incident response and analyst experience, and have potentially driven your own threat research initiatives.

Required Skills:

• Client/Server programming on both Windows and Unix
• AWS, GCP, Azure, or other Cloud based delivery
• Experience with various Security frameworks, models, and formats. For example: MITRE ATT&CK, Diamond Model, IOC, STIX/TAXII
• Experience working with operations, development, or testing of SaaS based architectures
• Deep knowledge of relational databases, No-SQL solutions, message queuing, object storage, and/or map-reduce to solve large problems
• Experience with a security role such as Incident Responder, Threat Hunter, Digital Forensics Examiner, etc.
• Experience across multiple security domains e.g. endpoint, network, email, identity
• Deep understanding of Windows Administration or Windows Security, Assessment and usage of Threat Intelligence

Why Cisco Secure

We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU.

Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.

We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!

There are so many amazing reasons to join Cisco. Learn more !