Note: The job is a remote job and is open to candidates in USA. Cisco is a technology company that provides security, visibility, and insights across digital infrastructure. The Vulnerability Management Engineer will lead vulnerability assessments, prioritize and remediate security risks, establish infrastructure security standards, and partner with engineering teams to address vulnerabilities. The role also supports audits, compliance, security reporting, and defense strategies across cloud, SaaS, containerized, and orchestration environments.
Responsibilities
- You’ll be at the heart of keeping Splunk secure by turning complex security data into clear, actionable insights
- You won’t just be digging through vulnerabilities or other weaknesses; you’ll be setting the standards that keep our platforms resilient against new threats
- We want someone who enjoys partnering directly with engineering teams to address risks head-on and get critical fixes across the finish line
- You’ll also be our go-to person for navigating audits and compliance, helping us focus on the spirit of security requirements rather than just blindly following the letter of the law
- Ultimately, your goal is to cut through the noise, prioritize what actually matters, and be part of a defense strategy that keeps our company and our customers safe
Skills
- The successful applicant will be performing work on US Government classified environments, and therefore, must be a U.S. Person (i.e., U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee)
- This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil
- 3+ years of experience in the vulnerability management lifecycle, including the assessment, prioritization, and hands-on remediation of security vulnerabilities within complex infrastructure
- Proven experience in assessing or applying configuration compliance standards (e.g., CIS Benchmarks, DISA STIGs) to harden infrastructure and cloud environments to meet regulatory requirements (e.g., PCI DSS, SOC2, HIPAA, FedRAMP)
- Demonstrated experience utilizing threat modeling and CVSS scoring to prioritize vulnerabilities based on business impact and technical risk
- Experience securing containerized environments and orchestration platforms, specifically Docker and Kubernetes
- Technical experience with cloud operational models and the security requirements of SaaS architectures built on microservices
- Demonstrated experience using Splunk and Search Processing Language (SPL) to query output from tooling, visualize security data, and build automated reporting dashboards for vulnerability tracking
- Documented experience integrating or using security scanning tools in CI/CD pipelines and auditing Infrastructure as Code (e.g., Terraform, CloudFormation) to identify configuration errors prior to deployment
- Proven ability to translate complex technical security risks into actionable insights for both technical engineering teams and executive stakeholders
- Demonstrated track record of self-motivation and continuous self-learning, with the ability to independently research and adapt to emerging security threats and technologies
- Hands-on configuration and management of enterprise scanning platforms (e.g., Tenable, Qualys, Rapid7)
Benefits
- Remote work arrangement
- U.S. employees are offered medical, dental and vision insurance, subject to Cisco’s plan eligibility rules.
- A 401(k) plan with a Cisco matching contribution for U.S. employees, subject to Cisco’s plan eligibility rules.
- Paid parental leave for U.S. employees, subject to Cisco’s plan eligibility rules.
- Short- and long-term disability coverage for U.S. employees, subject to Cisco’s plan eligibility rules.
- Basic life insurance for U.S. employees, subject to Cisco’s plan eligibility rules.
- Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time.
- 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees.
- 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco.
- Non-exempt employees receive 16 days of paid vacation time per full calendar year, accrued at a rate of 4.92 hours per pay period for full-time employees.
- Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use, subject to availability and some business limitations.
- 80 hours of sick time off provided on the hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next.
- Additional paid time away may be requested to deal with critical or emergency issues for family members.
- Optional 10 paid days per full calendar year to volunteer.
- For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco’s policies.
- Employees on sales plans earn performance-based incentive pay on top of their base salary, subject to the applicable Cisco plan.
Company Overview