Security Research Engineer / Writer

Strong preference is to consider Remote for the following locations: Fulton MD/Washington DC, Boston MA, Atlanta GA, Raleigh/RTP NC, Ann Arbor MI, Austin TX, SanJose CA

Application window has been extended and is expected to close by 03/31/2025. However, the job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Are you a strong analytical writer who is informed and passionate about the cyber threat landscape? Are you interested in high-level analysis of emerging trends as well as detailed investigations of individual security incidents? Do you excel in cross-team collaboration and joint research? Are you constantly looking for innovative ways to track and share intelligence findings? Are you able to contextualize complex topics for a variety of different audiences?

Join Talos' Strategic Analysis team and our mission of providing essential context on the threat landscape to Cisco customers and the security community at large.

• Write analytical reports and blogs on diverse topics for a variety of different audiences.
• Act as principal investigator for internal and external research projects.
• Query, enrich, and analyze data from Cisco telemetry and open-source repositories to identify anomalous or potentially malicious activity
• Hunt malware, tools, and threat actors across various data sets.
• Track and document threat actor tactics, techniques, and procedures (TTPs) based on open-source research, Talos findings, and incident response engagements.
• Author long-form research papers on various threat actors/tools/malware.
• Source and analyze data from available product sources across Cisco as well as externally from partners or other qualified third-parties.
• Manage dissemination of security intelligence and research efforts across the organization.
• Monitor strategic trends in the cyber threat landscape, including threat actor behavior and the emergence of new adversaries and threats.
• Provide quick turnaround analysis for internal business intelligence and external communications with customers/stakeholders.
• Establish cross-departmental channels to facilitate collaborative research and analysis.
• Provide analytical editing for Talos intelligence products.

• 2+ years' experience researching, writing, editing, and presenting threat intelligence investigations for a variety of audiences.
• 3+ years' experience in a security research, threat intelligence, or intelligence analysis role with a Bachelor's degree or equivalent years of experience
• 2+ years' experience threat hunting or tracking malware, tools, or threat actors across various data sets.
• 2+ years' experience with threat analysis platforms, such as Synapse, ThreatConnect, Maltego, etc.

• Excellent soft skills, including collaborating with remote teams, communicating findings via briefings and written products, and accepting and providing critiques/feedback.
• In-depth understanding and knowledge of the security landscape
• Proficiency in scripting languages (e.g. Python, Ruby, Perl)
• Experience with data intelligence platforms i.e. DataBricks
• Background in geopolitics
• Fluency in a language other than English
• Postgraduate degree
• Quick analytical skills, with the ability to conduct fast-paced research
• Ability to solve complex problems independently
• Ability to track and manage numerous parallel activities
• Facility for learning mastering new technologies, skills, and areas of research

#WeAreCisco

#WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection-we celebrate our employees' diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company, many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best, but be their best.

We understand our outstanding opportunity to bring communities together and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organizations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer-80 hours each year-allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!