[Hiring] Threat Intelligence Investigator @Cisco

Role Description

The Global Security & Executive Protection (GS&EP) team is seeking a technical Threat Hunting Investigator to identify, investigate, and mitigate risks largely posed by internal actors - whether malicious, negligent, or compromised. This role provides direct support to conduct research and investigations into threats and incidents related to ELT/CEO, the digital protection of our ELT, and protection of critical intellectual property.

You will combat:

• Critical IP Theft

Focus on digital protection efforts including research and investigation on:

• Threats directed towards Cisco’s Executive Leadership Team (ELT)

This role requires deep technical expertise, strong investigative judgment, and discretion. You will proactively hunt for:

• Insider Threats

In this role, you will be working in an agile, fast-paced, and collaborative environment to:

• Identify and focus on threat research and insider risk
• Conduct threat hunting using logs, telemetry, and behavioral indicators across endpoints
• Produce clear, defensible investigative reports
• Support ELT incident response and mitigate critical IP theft
• Draft and document internal solutions responsive to emerging insider risks
• Conduct and document hands-on technical research on potential digital threats

Qualifications

• Bachelor's Degree in Computer Science, Information Systems, or a related field
• 8-10 years of experience identifying and prioritizing sensitive information, evaluating threats, and implementing countermeasures
• 8-10 years conducting digital threat investigations related to insider threats
• 8-10 years conducting data triage and forensic analysis of endpoint devices
• Deep technical expertise, strong investigative judgment, and discretion

Requirements

• Firm understanding of Cisco products and technologies, to include expert-level proficiency in Splunk and specific experience with Code42 and/or Microsoft Defender
• 2+ years of experience in Counterintelligence (CI) or within a US Federal Government organization
• Understanding of C/C++, Python, Verilog, and other source code languages
• Strong written and verbal communication skills, with the ability to explain technical findings to non-technical stakeholders

Benefits

• Medical, dental and vision insurance
• 401(k) plan with a Cisco matching contribution
• Paid parental leave
• Short and long-term disability coverage
• Basic life insurance
• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
• 1 paid day off for employee’s birthday
• Paid year-end holiday shutdown
• 4 paid days off for personal wellness determined by Cisco
• 16 days of paid vacation time per full calendar year for non-exempt employees
• Flexible vacation time off program for exempt employees
• 80 hours of sick time off provided on hire date and each January 1st thereafter
• Optional 10 paid days per full calendar year to volunteer