Security Research Engineer

The application window is expected to close on: May 20, 2025

Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Preference will be given to candidates local to Austin, Texas; Ann Arbor, Michigan; Research Triangle Park, Raleigh, North Carolina; Fulton, Maryland; Atlanta Metro, Georgia; Boston Metro, Massachusetts.

Meet the Team

The Talos Threat Research: Endpoint (TR:E) team secures and protects customers through phenomenal products and takes a lead in customer focused research and delivery. We work to understand attacker tactics, techniques and procedures at the deepest levels to guide product features which ultimately enable us to write detection logic to detect and prevent cyber-attacks. We work with data scientists, machine learning specialists, threat hunters, and software developers to identify and remediate security gaps where they exist.

Your Impact

As a part of the Talos Threat Research: Endpoint Team (TR:E) supporting Cisco Security products, you will provide security research, detection content development, support assistance, and product capability enhancements for Windows, Linux, and MacOS. You will:

• Work towards keeping yourself abreast of the latest malware techniques.
• Investigate, analyze and respond to malware incidents.
• Collaborate with other security researchers to help address customer concerns.
• Identify and communicate product efficacy gaps and new feature guidance to engineering teams.
• Develop security content, provide domain expertise, and help protect customers from breaches and cyber-attacks.
• Craft internal tooling to support team workflows to work more efficiently, accurately, and at scale.
• Analyze and action both internal and customer escalations that cannot be resolved by our support teams.

Minimum Qualifications:

• 5+ years' experience in a related role OR 3+ year experience with a Master's degree equivalent in Computer Science, Computer Engineering, Electrical Engineering, or Cybersecurity-related field
• Experience in at least one scripting language (Python, bash)
• Experience in at least one other programming language (C, C++, Go, Rust, Clojure)
• Experience in Software Reverse Engineering or Malware Analysis using related tools such as IDA Pro, Ghidra, and debuggers

Preferred Qualifications:

• Experience with red-teaming tools: Familiarity with tools like Metasploit, CobaltStrike, and Powershell Empire.
• Network and system analysis skills: Ability to analyze network pcaps, system logs, and malicious scripts.
• Knowledge of endpoint security and sandbox technologies: Experience with security solutions and isolation environments.
• Collaborative teamwork: Ability to work effectively in a multidisciplinary team.
• Problem-solving skills: Strong troubleshooting and root cause analysis capabilities.
• Effective communication: Proficiency in verbal and written English communication.

#WeAreCisco

#WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection-we celebrate our employees' diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company, many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best, but be their best.

We understand our outstanding opportunity to bring communities together and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organizations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer-80 hours each year-allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!