Threat Intelligence Investigator - Global Security & Executive Protection (Remote) 20010019

The application window is expected to close on: 05/01/2026 Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received . Threat Intelligence Investigator, Global Security & Executive Protection (Remote) 20010019 Meet the Team The Global Executive Protection (GEXP) team primarily supports the security of the CEO and Executive Leadership Team at Cisco. We are Executive Protection professionals that work on the premise of making the unknown known, to ensure to the best of our abilities, the successful completion of each detail and protective coverage of the CEO/ELT. GEXP is part of the Security and Trust Organization. The Role The Global Security & Executive Protection (GS&EP) team is seeking a technical Threat Hunting Investigator to identify, investigate, and mitigate risks largely posed by internal actors - whether malicious, negligent, or compromised. This role provides direct support to conduct research and investigations into threats and incidents related to ELT/CEO, the digital protection of our ELT, and protection of critical intellectual property. You will combat Critical IP Theft , and focus on digital protection efforts including research and investigation on Threats directed towards Cisco’s Executive Leadership Team (ELT). This role requires deep technical expertise, strong investigative judgment, and discretion. You will proactively hunt for Insider Threats , evaluate threats directed at ELT, analyze complex datasets across multiple systems, and partner closely with security, Legal, HR, and compliance partners throughout the Security & Trust Organization to drive risk-based outcomes. In this role, you will be working in an agile, fast-paced, and collaborative environment to: Identify and focus on threat research and insider risk Conduct threat hunting using logs, telemetry, and behavioral indicators across endpoints Produce clear, defensible investigative reports Support ELT incident response and mitigate critical IP theft Draft and document internal solutions responsive to emerging insider risks Conduct and document hands-on technical research on potential digital threats Required Qualifications: Bachelor's Degree in Computer Science, Information Systems, or a related field 8-10 years of experience identifying and prioritizing sensitive information, evaluating threats, and implementing countermeasures 8-10 years conducting digital threat investigations related to insider threats 8-10 years conducting data triage and forensic analysis of endpoint devices Deep technical expertise, strong investigative judgment, and discretion. Desired Qualifications Firm understanding of Cisco products and technologies, to include expert-level proficiency in Splunk and specific experience with Code42 and/or Microsoft Defender 2 years of experience in Counterintelligence (CI) or within a US Federal Government organization Understanding of C/C, Python, Verilog, and other source code languages Strong written and verbal communication skills, with the ability to explain technical findings to non-technical stakeholders Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you. Message ... (truncated, view full listing at source)