Attack Surface Management Security Engineer I (Full-Time) – United States

Cisco•Knoxville, NC

About The Position

Cisco’s security team protects its global digital ecosystem across more than 200,000 connected assets by discovering, mapping, and evaluating internet-facing infrastructure. The team emphasizes continuous learning, collaboration, mentorship, modern AI-assisted tools, and security at global scale. As an Attack Surface Management Security Engineer I, you will help protect Cisco’s infrastructure by identifying public assets and supporting vulnerability resolution. You will perform asset discovery and vulnerability scans, analyze results to help engineering teams prioritize and resolve security findings, and contribute to automated workflows and dashboards that make vulnerability tracking more efficient and transparent. You will collaborate with asset owners across functions and work with experienced mentors to promote strong security practices. This posting advertises potential opportunities; the exact role may not be open at the time of application. A Cisco representative may contact applicants if a relevant position becomes available. Applications are accepted until further notice.

Requirements

Meet one of these education and experience pathways, with the education or program completed within the past 3 years or expected to be completed within the next 12 months: a bachelor’s degree and 0 years of work experience; an educational or workforce development program (such as an associate’s degree, apprenticeship, boot camp, or certification) and 1 year of work experience; or a high school diploma or equivalent and 2 years of work experience.
Qualifying education and work experience must be in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related field.
Experience or academic coursework supporting routine vulnerability scanning, discovery pipelines, and exposure assessment processes across hybrid environments using established guidelines.
Practical knowledge of reviewing and prioritizing security findings by severity, using automated or AI-assisted tools, and tracking remediation progress with system owners.
Basic familiarity with scripting such as Python, Bash, or PowerShell; ticketing platforms such as Jira or ServiceNow; and maintaining operational dashboards.

Nice To Haves

Participation in hands-on cybersecurity activities, student clubs, Capture The Flag events, or personal lab projects.
Foundational industry certifications such as CompTIA Security+, Network+, CySA+, or Cisco Certified Support Technician Cybersecurity.
Familiarity with asset discovery platforms, network exploration tools, or vulnerability scanners such as Nmap, Shodan, Qualys, or Nessus.
Foundational understanding of cloud concepts across Amazon Cloud, Microsoft Azure, or Google Cloud Platform.
Collaborative communication skills and eagerness to learn, ask questions, and share knowledge within a team environment.

Responsibilities

Perform asset discovery and vulnerability scans to maintain an accurate view of Cisco’s global digital environment.
Analyze scan results to help engineering teams prioritize and resolve security findings across connected systems.
Help create automated workflows and dashboards to improve the efficiency and transparency of vulnerability tracking.
Collaborate with cross-functional asset owners and experienced mentors.
Champion best-in-class security practices.

Benefits

Medical, dental, and vision insurance, subject to plan eligibility rules.
401(k) plan with a Cisco matching contribution.
Paid parental leave.
Short- and long-term disability coverage.
Basic life insurance.
Potential grants of Cisco restricted stock units, which vest following continued employment for defined periods.
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees.
1 paid day off for an employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness.
For non-exempt employees, 16 days of paid vacation per full calendar year, accrued at 4.92 hours per pay period for full-time employees.
For eligible exempt employees, a flexible vacation time-off program with no defined usage limit, subject to availability and business limitations.
80 hours of sick time off provided on hire date and each January 1 thereafter, with up to 80 hours of unused sick time carried forward.
Additional paid time away may be requested for critical or emergency family issues.
Optional 10 paid volunteer days per full calendar year.
For non-sales roles, eligibility to earn annual bonuses, subject to Cisco policies.