Research Engineer

Apply
  • Location:
    Offsite, Fulton, Maryland, US
  • Area of Interest
    Engineer - Software
  • Compensation Range
    140000 USD - 197700 USD
  • Job Type
    Professional
  • Technology Interest
    Security
  • Job Id
    1430483

Application window is expected to close by 11/17/2024



Who we are:

The Talos Network Threat Detection and Response Team creates network and endpoint signatures that 

are distributed world-wide to multiple products in Cisco's security portfolio and the open- 

source community. 


Who you Are:

In this position you will create detection content for vulnerabilities in a variety of 

Cisco and non-Cisco products. Understanding these vulnerabilities may come from 

reviewing technical reports, reading code diffs, or developing proofs-of-concept based 

on varying degrees of background information. Once released, these protections 

directly impacts the security of people and organizations around the globe. With time and 

experience you will develop subject matter expertise in some of the technologies we 

work with, act as a technical representative for NTDR at meetings with other departments 

and conduct long-term advanced research and development that can be used to 

improve Cisco's products. 

If you're a tenacious learner, have an excruciating interest in detail, and want to develop 

Your technical leadership skills in information security, this may be the right role for you. 


What you ‘ll do:

Role & Responsibilities:

  • Research security threats, attacker techniques and tools, 0-day vulnerabilities and other in-depth research on novel threats 
  • Write in-depth technical advisories about threats and signatures 
  • Analyze malware samples and vulnerable binaries using static/dynamic analysis debuggers to Build advanced signatures and detection content for Snort, ClamAV, AMP, and other Cisco products 
  • Create testbed environments to research and run exploits 
  • Develop tooling that forwards the mission of the team 
  • Participate in advanced research projects 


Minimum Qualifications:

  • 3+ years professional and/or educational experience with analyzing, identifying, and exploiting a wide variety of vulnerability types, such as buffer overflows, integer overflows, cross-site and server-side request forgery attacks, insecure deserializations, and/or authentication bypasses 
  • 3+ years professional and/or educational experience using packet analysis tools like Wireshark to analyze network or transport, and application layer protocols, such as IP, TCP, LDAP, TLS, RDP or SMB 
  • 3+ years professional and/or educational experience with a compiled language (e.g. C, C++, Rust, Go) and/or a scripting language (e.g. Python, Ruby, Perl) 


Preferred Qualifications:

  • Expertise with the structure of common file formats, such as PDF, MS Office, EXE, ELF and an ability to identify anomalies using popular file-analysis tools such as 010 Editor 
  • Expert knowledge of operating system internals and familiarity with concepts such as: application memory layout, C runtime or OS-related functions, kernel vs user space functionality 
  • Expertise with reverse engineering, malware analysis, and relevant tools (e.g.IDA Pro, Binary Ninja, Ghidra, radare2, x64dbg, WinDbg, OllyDbg), as well as analyzing assembly code and identifying code patterns in disassembled binaries 
  • 5+ years of related industry experience in roles like: incident response, intrusion detection, forensic analysis, pentesting or red teaming, or vulnerability development 
  • Experience with detection content engineering such as Snort rules language 
  • Master's degree or equivalent experience Computer Science, Cyber Security, or other tech-related degree 


Why Cisco Secure:

We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU.

Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.

We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!

There are so many amazing reasons to join Cisco. Learn more here!


Message to applicants applying to work in the U.S. and/or Canada:

When available, the salary range posted for this position reflects the projected hiring range for new hire, full-time salaries in U.S. and/or Canada locations, not including equity or benefits. For non-sales roles the hiring ranges reflect base salary only; employees are also eligible to receive annual bonuses. Hiring ranges for sales positions include base and incentive compensation target. Individual pay is determined by the candidate's hiring location and additional factors, including but not limited to skillset, experience, and relevant education, certifications, or training. Applicants may not be eligible for the full salary range based on their U.S. or Canada hiring location. The recruiter can share more details about compensation for the role in your location during the hiring process.

U.S. employees have access to quality medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, short and long-term disability coverage, basic life insurance and numerous wellbeing offerings. Employees receive up to twelve paid holidays per calendar year, which includes one floating holiday, plus a day off for their birthday. Employees accrue up to 20 days of Paid Time Off (PTO) each year and have access to paid time away to deal with critical or emergency issues without tapping into their PTO. We offer additional paid time to volunteer and give back to the community. Employees are also able to purchase company stock through our Employee Stock Purchase Program.

Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components. For quota-based incentive pay, Cisco typically pays as follows:

.75% of incentive target for each 1% of revenue attainment up to 50% of quota;

1.5% of incentive target for each 1% of attainment between 50% and 75%;

1% of incentive target for each 1% of attainment between 75% and 100%; and once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation.

For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid.

Share

Apply