Attack Surface Management Security Engineer II (Full-Time) – United States
About The Position
Cisco’s team protects its global digital ecosystem across more than 200,000 connected assets by discovering, mapping, and assessing internet-facing infrastructure. The team works collaboratively to identify security opportunities and help keep Cisco’s systems resilient, using modern AI-assisted tools and continuous learning. As an Attack Surface Management Security Engineer II, you will help protect Cisco’s global infrastructure by identifying public assets and guiding vulnerability resolutions. You will perform advanced asset discovery and vulnerability assessments across connected enterprise and cloud environments, partner with system owners to prioritize security findings and ensure timely remediation, and build scripts and integrations to streamline data collection and reporting. You will also collaborate with experienced security engineers to develop detection capabilities and improve team practices.
Requirements
- Meet one qualifying education and experience pathway, completed within the past three years or expected within the next 12 months: a master’s degree and no work experience; a bachelor’s degree and two years of work experience; an educational or workforce development program (such as an associate’s degree, apprenticeship, boot camp, or certification) and three years of work experience; or a high school diploma or equivalent and four years of work experience.
- Qualifying education and work experience must be in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related field.
- Experience performing routine vulnerability scanning, discovery pipelines, exposure assessments, and validation evidence across hybrid environments using established runbooks.
- Ability to review and prioritize security findings by severity and exposure context, using automated or AI-assisted tools; track remediation workflows; and collaborate with asset owners to resolve vulnerabilities.
- Practical experience with security workflow scripting, ticketing platforms such as Jira or ServiceNow, operational monitoring dashboards, and metric reporting for team reviews.
Nice To Haves
- Industry-recognized security certifications such as CompTIA Security+, CySA+, CEH, GIAC certifications, or Cisco Certified Network Associate.
- Familiarity with cloud security configurations and exposure management on platforms such as Amazon Cloud, Microsoft Azure, or Google Cloud Platform.
- Experience reviewing network telemetry, DNS records, TLS certificates, and HTTP headers to evaluate external exposures.
- Practical experience building automated data integrations or dashboards using tools such as Splunk, Tableau, Power BI, or Grafana.
- Strong communication and interpersonal skills, with enthusiasm for collaborating across diverse engineering teams.
Responsibilities
- Perform advanced asset discovery and vulnerability assessments across connected enterprise and cloud environments.
- Identify public assets and guide vulnerability resolution.
- Partner with system owners to prioritize security findings and ensure timely remediation.
- Build automated scripts and integrations to streamline data collection and improve team reporting.
- Collaborate with security engineers to develop detection capabilities and elevate team best practices.
Benefits
- Medical, dental, and vision insurance
- 401(k) plan with Cisco matching contribution
- Paid parental leave
- Short- and long-term disability coverage
- Basic life insurance
- Paid holidays and a floating holiday for non-exempt employees
- Paid birthday day off, year-end holiday shutdown, and personal wellness days
- Paid vacation time for non-exempt employees or flexible vacation time off for eligible exempt employees
- Sick time off, including carryover of unused sick time
- Additional paid time away may be requested for critical or emergency family issues
- Optional paid volunteer days
- Annual bonuses for eligible non-sales employees
- Potential grants of Cisco restricted stock units
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
