Attack Surface Management Security Engineer I

About the Role

Join Cisco’s security team, protecting Cisco’s global digital ecosystem across more than 200,000 connected assets. The mission is to continuously discover, map, and evaluate internet-facing infrastructure to identify security improvements and ensure system resilience. This is a diverse, highly supportive team of security professionals dedicated to continuous learning, open collaboration, and active mentorship for early-career engineers. The team utilizes modern AI-assisted tools to solve security challenges at a global scale.

As an Attack Surface Management Security Engineer I, you will help protect Cisco’s infrastructure by identifying public assets and guiding vulnerability resolutions.

Key Responsibilities

• Perform asset discovery and vulnerability scans to maintain an accurate view of Cisco’s global digital environment.
• Analyze scan results to assist engineering teams in prioritizing and resolving key security findings across connected systems.
• Help create automated workflows and dashboards to make vulnerability tracking more efficient and transparent.
• Collaborate with cross-functional asset owners and experienced mentors to champion best-in-class security practices.

Requirements & Tech Stack

• Education & Experience Pathway (completed within the past 3 years or expected to be completed within the next 12 months):
• A Bachelor's degree with 0 years of work experience.
• An educational or workforce development program (e.g., Associate’s, Apprenticeship, Boot camp, or Certification) with 1 year of work experience.
• High school diploma (or equivalent) with 2 years of work experience.
• Qualifying Discipline: Qualifying education and work experience in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related field.
• Vulnerability Scanning & Exposure Operations: Experience or academic coursework supporting routine vulnerability scanning, discovery pipelines, and exposure assessment processes across hybrid environments using established guidelines.
• Risk Triage & Remediation Support: Practical knowledge of reviewing and prioritizing security findings by severity, utilizing automated or AI-assisted tools, and tracking remediation progress with system owners.
• Workflow Automation & Reporting: Basic familiarity with scripting (e.g., Python, Bash, or PowerShell), ticketing platforms (such as Jira or ServiceNow), and maintaining operational dashboards for team updates.

Qualifications

• Participation in hands-on cybersecurity activities, student clubs, Capture The Flag (CTF) events, or personal lab projects.
• Foundational industry certifications (such as CompTIA Security+, Network+, CySA+, or Cisco Certified Support Technician Cybersecurity).
• Familiarity with asset discovery platforms, network exploration tools, or vulnerability scanners (such as Nmap, Shodan, Qualys, or Nessus).
• Foundational understanding of cloud concepts across major cloud platforms (such as Amazon Cloud, Microsoft Azure, or Google Cloud Platform).
• Collaborative communication skills and an eagerness to learn, ask questions, and share knowledge within a team environment.