Detection Engineer (Remote)

The application window is expected to close on: June 30^th, 2025. Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Meet the Team

Talos Threat Research is composed of highly skilled individuals who are comfortable working in a fast-paced and technically challenging environment. We are tasked with improving the detection and alerting capabilities of the Cisco security suites. Part of this work includes researching threat actor tactics and techniques, malware and exploitation methods to add to the detection and prevention capabilities of the respective products.

Your Impact

Are you passionate about the changing threat landscape, love the challenge of understanding how advanced adversaries compromise novel environments, and want to drive positive change across a broad organization?

This position allows you the ability to conduct research into the attack landscape of cloud and network security and apply your findings to the development of detection content which will reduce information security risk to organizations protected by Cisco security products. It requires a professional with a strong security and threat analysis background, including experience with offensive techniques in the cloud and network domains as well as how threat actors leverage these techniques to conduct their operations.

Minimum Qualifications:

• BS Degree and 5+yrs experience
• Experience working with public cloud providers such as AWS, Azure, GCP, OCI, including architecture and configuration
• Experience with operating system internals including Windows and Mac OS.
• Experience in writing and validation of threat signatures such as Sigma, Snort, Yara, Clam or OpenIOC

Preferred Qualifications:

• Incident response experience
• Some familiarity with software engineering processes such as Git, CI/CD and agile development (this is not a development role, but some knowledge of processes utilized by software engineers is useful)
• Process development & Documentation experience
• Data analysis and interpretation skills
• Background in or knowledge of Quality Assurance

#WeAreCisco

#WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection-we celebrate our employees' diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company, many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best, but be their best.

We understand our outstanding opportunity to bring communities together and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organizations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer-80 hours each year-allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!