Job Description
Company Overview
Cisco Systems, Inc. is a global leader in networking, security, and collaboration technologies. With a portfolio that spans routers, switches, cloud security, and advanced threat protection, Cisco helps organizations of all sizes secure and optimize their digital infrastructure. Headquartered in San Jose, California, Cisco is recognized for its innovative culture, commitment to employee development, and a diverse, inclusive workplace. The company is actively hiring for a virtual Network Security Monitor to strengthen its security operations center and protect customers worldwide.
Key Responsibilities
- Continuously monitor Cisco’s global network traffic using SIEM, IDS/IPS, and proprietary analytics platforms to detect anomalous activity and potential threats.
- Conduct real‑time triage of security alerts, prioritize incidents based on risk, and coordinate escalation to incident response teams.
- Develop and refine detection rules, correlation searches, and dashboards to improve visibility across hybrid and multi‑cloud environments.
- Perform forensic analysis of network packets, logs, and flow data to identify attack vectors and support root‑cause investigations.
- Collaborate with engineering, threat intelligence, and compliance groups to ensure monitoring coverage aligns with evolving security policies and regulatory requirements.
- Contribute to on‑call rotation, providing after‑hours support and detailed incident reporting.
- Document procedures, create knowledge‑base articles, and participate in continuous‑improvement initiatives for the security operations center.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.
- Minimum of 3 years of hands‑on experience in network security monitoring, SOC operations, or cyber‑threat detection.
- Proficiency with security information and event management (SIEM) tools such as Splunk, QRadar, or Elastic Stack.
- Strong understanding of TCP/IP, routing protocols (BGP, OSPF), VPN technologies, and common network architectures.
- Experience analyzing network traffic with Wireshark, Zeek, or similar packet‑analysis tools.
- Knowledge of common attack techniques (e.g., DDoS, lateral movement, credential dumping) and MITRE ATT&CK framework.
- Ability to work independently in a remote environment while maintaining clear communication with distributed teams.
Desired Skills
- Certifications such as Cisco CCNA Security, CompTIA Security+, or GIAC Continuous Monitoring (GCTI).
- Familiarity with cloud networking and security monitoring in AWS, Azure, or Google Cloud.
- Scripting skills in Python, PowerShell, or Bash for automation of repetitive tasks.
- Experience with threat‑intelligence platforms and open‑source intelligence (OSINT) sources.
- Prior exposure to incident response processes and post‑incident lessons‑learned documentation.
Compensation & Benefits
- Competitive annual base salary ranging from $115,000 to $150,000, commensurate with experience and qualifications.
- Annual performance bonus opportunity and eligibility for stock awards.
- Comprehensive health, dental, and vision coverage with employee and dependent options.
- 401(k) plan with company match, flexible paid time off, and generous parental leave.
- Professional development stipend, tuition assistance, and support for industry certifications.
- Remote‑first work model with a home office allowance and access to Cisco’s global collaboration tools.
How to Apply
Interested candidates should visit Cisco’s Careers portal, locate the “Network Security Monitor – Virtual” posting, and submit an online application including a current résumé and a concise cover letter outlining relevant experience. After submission, qualified applicants will be contacted by a recruiter to discuss next steps in the interview process. Cisco is an equal‑opportunity employer and encourages applicants from all backgrounds to apply.
Cisco Systems, Inc. is a global leader in networking, security, and collaboration technologies. With a portfolio that spans routers, switches, cloud security, and advanced threat protection, Cisco helps organizations of all sizes secure and optimize their digital infrastructure. Headquartered in San Jose, California, Cisco is recognized for its innovative culture, commitment to employee development, and a diverse, inclusive workplace. The company is actively hiring for a virtual Network Security Monitor to strengthen its security operations center and protect customers worldwide.
Key Responsibilities
- Continuously monitor Cisco’s global network traffic using SIEM, IDS/IPS, and proprietary analytics platforms to detect anomalous activity and potential threats.
- Conduct real‑time triage of security alerts, prioritize incidents based on risk, and coordinate escalation to incident response teams.
- Develop and refine detection rules, correlation searches, and dashboards to improve visibility across hybrid and multi‑cloud environments.
- Perform forensic analysis of network packets, logs, and flow data to identify attack vectors and support root‑cause investigations.
- Collaborate with engineering, threat intelligence, and compliance groups to ensure monitoring coverage aligns with evolving security policies and regulatory requirements.
- Contribute to on‑call rotation, providing after‑hours support and detailed incident reporting.
- Document procedures, create knowledge‑base articles, and participate in continuous‑improvement initiatives for the security operations center.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.
- Minimum of 3 years of hands‑on experience in network security monitoring, SOC operations, or cyber‑threat detection.
- Proficiency with security information and event management (SIEM) tools such as Splunk, QRadar, or Elastic Stack.
- Strong understanding of TCP/IP, routing protocols (BGP, OSPF), VPN technologies, and common network architectures.
- Experience analyzing network traffic with Wireshark, Zeek, or similar packet‑analysis tools.
- Knowledge of common attack techniques (e.g., DDoS, lateral movement, credential dumping) and MITRE ATT&CK framework.
- Ability to work independently in a remote environment while maintaining clear communication with distributed teams.
Desired Skills
- Certifications such as Cisco CCNA Security, CompTIA Security+, or GIAC Continuous Monitoring (GCTI).
- Familiarity with cloud networking and security monitoring in AWS, Azure, or Google Cloud.
- Scripting skills in Python, PowerShell, or Bash for automation of repetitive tasks.
- Experience with threat‑intelligence platforms and open‑source intelligence (OSINT) sources.
- Prior exposure to incident response processes and post‑incident lessons‑learned documentation.
Compensation & Benefits
- Competitive annual base salary ranging from $115,000 to $150,000, commensurate with experience and qualifications.
- Annual performance bonus opportunity and eligibility for stock awards.
- Comprehensive health, dental, and vision coverage with employee and dependent options.
- 401(k) plan with company match, flexible paid time off, and generous parental leave.
- Professional development stipend, tuition assistance, and support for industry certifications.
- Remote‑first work model with a home office allowance and access to Cisco’s global collaboration tools.
How to Apply
Interested candidates should visit Cisco’s Careers portal, locate the “Network Security Monitor – Virtual” posting, and submit an online application including a current résumé and a concise cover letter outlining relevant experience. After submission, qualified applicants will be contacted by a recruiter to discuss next steps in the interview process. Cisco is an equal‑opportunity employer and encourages applicants from all backgrounds to apply.
Required Skills
- Network
- Security
- Monitor
- Virtual