Attack Surface Management Security Engineer II (Full-Time) – United States

Cisco • Knoxville, NC

1d

About The Position

As an Attack Surface Management Security Engineer II, you will help protect Cisco’s global infrastructure by identifying public assets and guiding vulnerability resolutions. You will perform advanced asset discovery and vulnerability assessments to maintain visibility across connected enterprise and cloud environments. You will partner with system owners across Cisco to prioritize security findings and ensure timely remediation. You will also build automated scripts and integrations to streamline data collection and improve team reporting. Throughout your work, you will collaborate with experienced security engineers to develop new detection capabilities and elevate team best practices.

This posting advertises potential job opportunities; the exact role may not be open today but could open in the near future. Applications are accepted until further notice.

Requirements

• Meet one of the following education and experience pathways, completed within the past 3 years or expected to be completed within the next 12 months: a master’s degree and 0 years of work experience; a bachelor’s degree and 2 years of work experience; an educational or workforce development program (such as an associate’s degree, apprenticeship, boot camp, or certification) and 3 years of work experience; or a high school diploma or equivalent and 4 years of work experience.
• Qualifying education and work experience must be in cybersecurity, information security, computer science, computer engineering, information technology, or a related field.
• Experience performing routine vulnerability scanning, discovery pipelines, exposure assessments, and validation evidence across hybrid environments using established runbooks.
• Ability to review and prioritize security findings by severity and exposure context, track remediation workflows, and collaborate with asset owners to resolve vulnerabilities.
• Practical experience with security workflow scripting, ticketing platforms such as Jira or ServiceNow, operational monitoring dashboards, and metric reporting.

Nice To Haves

• Industry-recognized security certification, such as CompTIA Security+, CySA+, CEH, a GIAC certification, or Cisco Certified Network Associate.
• Familiarity with cloud security configurations and exposure management across Amazon Cloud, Microsoft Azure, or Google Cloud Platform.
• Experience reviewing network telemetry, DNS records, TLS certificates, and HTTP headers to evaluate external exposures.
• Practical experience building automated data integrations or dashboards using tools such as Splunk, Tableau, Power BI, or Grafana.
• Strong communication and interpersonal skills, with enthusiasm for collaborating across diverse engineering teams.

Responsibilities

• Perform advanced asset discovery and vulnerability assessments across connected enterprise and cloud environments.
• Partner with system owners to prioritize security findings and ensure timely remediation.
• Build automated scripts and integrations to streamline data collection and improve team reporting.
• Collaborate with experienced security engineers to develop detection capabilities and improve team best practices.
• Perform routine vulnerability scanning, discovery pipelines, exposure assessments, and validation evidence across hybrid environments following established runbooks.
• Review and prioritize security findings by severity and exposure context, track remediation workflows, and collaborate with asset owners to resolve vulnerabilities.
• Use security workflow scripting and ticketing platforms, maintain operational monitoring dashboards, and prepare metric reports for team reviews.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) plan with Cisco matching contribution
• Paid parental leave
• Short- and long-term disability coverage
• Basic life insurance
• Paid holidays
• Floating holiday for non-exempt employees
• Paid birthday day off
• Paid year-end holiday shutdown
• Personal wellness days
• Paid vacation or flexible vacation time off, depending on employee classification
• Sick time off
• Additional paid time away may be requested for critical or emergency family issues
• Optional paid volunteer days
• Annual bonuses may be available for non-sales roles, subject to Cisco policies
• Employees may be eligible for Cisco restricted stock unit grants, subject to vesting conditions

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED