Attack Surface Management Security Engineer I

About the Role

Join Cisco’s security team, dedicated to protecting Cisco’s global digital ecosystem across more than 200,000 connected assets. The mission is to continuously discover, map, and evaluate internet-facing infrastructure to identify security improvements and ensure system resilience. This is a diverse, highly supportive team of security professionals focused on continuous learning, open collaboration, and mentorship.

Your Impact

As an Attack Surface Management Security Engineer I, you will:

• Protect Cisco’s infrastructure by identifying public assets.
• Guide vulnerability resolutions.
• Perform asset discovery and vulnerability scans to maintain an accurate view of Cisco’s global digital environment.
• Analyze scan results to assist engineering teams in prioritizing and resolving key security findings across connected systems.
• Help create automated workflows and dashboards to make vulnerability tracking more efficient and transparent.
• Collaborate with cross-functional asset owners and mentors to champion best-in-class security practices.

Requirements & Tech Stack

• Education & Experience Pathway: Meet one of the following (completed within the past 3 years or expected to be completed within the next 12 months):
• A Bachelor's degree with 0 years of work experience.
• An educational or workforce development program (e.g., Associate’s, Apprenticeship, Boot camp, or Certification) with 1 year of work experience.
• High school diploma (or equivalent) with 2 years of work experience.
• Qualifying Discipline: Qualifying education and work experience in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related field.
• Vulnerability Scanning & Exposure Operations: Experience or academic coursework supporting routine vulnerability scanning, discovery pipelines, and exposure assessment processes across hybrid environments.
• Risk Triage & Remediation Support: Practical knowledge of reviewing and prioritizing security findings by severity, utilizing automated or AI-assisted tools, and tracking remediation progress.
• Workflow Automation & Reporting: Basic familiarity with scripting (e.g., Python, Bash, or PowerShell), ticketing platforms (such as Jira or ServiceNow), and maintaining operational dashboards.

Qualifications

• Participation in hands-on cybersecurity activities, student clubs, Capture The Flag (CTF) events, or personal lab projects.
• Foundational industry certifications (such as CompTIA Security+, Network+, CySA+, or Cisco Certified Support Technician Cybersecurity).
• Familiarity with asset discovery platforms, network exploration tools, or vulnerability scanners (such as Nmap, Shodan, Qualys, or Nessus).
• Foundational understanding of cloud concepts across major cloud platforms (such as Amazon Cloud, Microsoft Azure, or Google Cloud Platform).
• Collaborative communication skills and an eagerness to learn, ask questions, and share knowledge within a team environment.