Security Research Engineer (Remote)

Cisco is a technology company focused on connecting and protecting data and infrastructure. The Security Research Engineer will identify vulnerabilities in Cisco products and services, emulate real-world adversaries, collaborate with engineering teams, and research emerging security topics to develop tools and improve the organization’s security posture.

Responsibilities:

• Evaluate global products and services to identify security vulnerabilities, weaknesses, and potential improvements to ensure the integrity of Cisco’s infrastructure
• Adopt an attacker mentality using specialized tools and techniques to emulate real-world adversaries and proactively secure our systems
• Partner with industry-leading engineering teams to assess complex architectures and contribute to creative security solutions that protect our customers
• Research emerging security topics independently or collaboratively to develop new tools and ideas that drive the evolution of our security posture
• Achieve success by delivering highly secured solutions that meet the rigorous demands of our most critical global clients

Requirements:

• *The successful applicant will be performing work on US Government classified environments, and therefore, must be a U.S. Person (i.e., U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee)
• This role can be performed from any location within the United States
• • Master's degree in Computer Science, Cybersecurity, or related field (with security research or project-based experience) or a Bachelor's degree with 2+ years of professional security experience
• • 2+ years of red teaming or penetration testing experience with emphasis on remote access, network penetration, Command and Control development and use, and covert channels in Cloud environments
• • 4+ years of Unix experience, including any applicable academic experience
• • Industry experience with AI/ML frameworks and offensive security tooling
• • Experience as a DevOps engineer
• • Experience in offensive security testing of web applications, APIs, user interfaces, mobile devices, and embedded devices
• • Experience with full-spectrum red-team tactics
• • Experience in a SOC, SRE, or incident response role
• • Strong ability to work collaboratively within a diverse, high-energy research team
• • Excellent communication skills for multi-functional engagement with engineering teams
• • Adaptability to work with emerging technologies and evolving security landscapes