Description
The Attack Surface Management team is mission-critical to our security infrastructure. We aggregate, normalize, and correlate security data from over 120 sources to provide a unified view of our environment. Our team focuses on data ingestion, service uptime, and providing the actionable intelligence required to maintain our security posture.
In this role, you will become the Domain Expert for our data pipelines, moving us from reactive monitoring to proactive, data-driven security. You will own the data ingestion and attribution layer, ensuring that every asset and vulnerability is accurately traced to its owner, business unit, and criticality tier.
Responsibilities:
- Design, build, and maintain robust data pipelines that ingest and normalize security data from a diverse array of sources.
- Operate and improve the attribution layer by implementing entity resolution and ownership assignment rules as version-controlled code.
- Establish data quality monitoring to detect anomalies, missing data, or correlation failures.
- Develop automated correlation logic for complex infrastructure scenarios.
- Collaborate with analysts and leadership to provide query support, reporting, and executive metrics.
Minimum Qualifications:
- Bachelor’s degree in Computer Science, Data Engineering, Information Systems, or a related field plus 3+ years of relevant experience.
- Proficiency in Python and SQL with a proven ability to write clean, maintainable code.
- Demonstrated experience building and operating ETL/ELT pipelines using REST APIs and semi-structured data.
- Experience with Git-based workflows, CI/CD, and data modeling standard processes.
- Proficiency in AI/ML usage, including the ability to apply AI to data analysis and correlation tasks.
Preferred Qualifications:
- Exposure to security data domains such as vulnerability management, asset inventory, CMDB, or SIEM.
- Experience with pipeline orchestration tools and transformation frameworks.
- Familiarity with graph data models, relationship-based asset modeling, or AI/ML-driven data analysis.
- Cloud platform experience and Infrastructure-as-Code principles.
- Experience operating within large-scale, federated, or decentralized enterprise environments.
Benefits:
- Medical, dental, and vision insurance.
- 401(k) plan with a Cisco matching contribution.
- Paid parental leave.
- Short and long-term disability coverage.
- Basic life insurance.
- Paid time away.
- Optional 10 paid days per full calendar year to volunteer.