Vulnerability Researcher Job at Cisco Careers, Fulton, MD

TGZiS1VwWjVsRGJGZzgxaEp6RkE4c2RDQVE9PQ==
  • Cisco Careers
  • Fulton, MD

Job Description

Application window has been extended and expected to close on 12/12/2024. However, the job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Cisco Talos Intelligence Group is one of the largest commercial threat intelligence teams in the world. Talos defends Cisco customers against known and emerging threats, discovers new vulnerabilities in common software, and interdicts threats in the wild before they can further harm the internet at large.

What You'll Do

If you enjoy vulnerability research, crash analysis, reverse engineering, and researching new techniques and writing tools to automate these tasks, this job is for you. This Senior Researcher position with Cisco Talos Vulnerability Discovery and Research Team is available to remote and international workers.

Security research including development of tools for vulnerability discovery, analysis, and mitigation. Development of fuzzers and static analysis tools to identify new vulnerabilities in software. Development of static and run-time analysis tools to figure out root cause and input conditions related to a vulnerability. Vulnerability triage and proof of concept exploit development to support the creation of detection content. Additional responsibilities include helping users and other analysts with setup, installation, and usage of the vulnerability research tools and demonstrating leadership in the security community through publishing open-source tools, papers, presentations, and blog posts.

Who You Are

  • Perform security analysis to discover new vulnerabilities in software and/or embedded systems.

  • Create tools for the discovery and triage of vulnerabilities.

  • Write detailed technical advisories on new vulnerabilities.

  • Develop proof of concept exploits for testing IPS and IDS effectiveness.

  • Perform patch analysis to find and trigger vulnerabilities.

  • Reverse engineer binary applications, protocols, and formats.

  • Analyze zero-day vulnerabilities and emerging security threats and technologies.

  • Demonstrate leadership within the security community.

Minimum Qualifications

  • 3+ years of experience in vulnerability research or a closely related area, e.g. exploit, fuzzing or mitigation development

  • Bachelor’s degree or equivalent in Computer Science, Electrical Engineering, Cyber Security, or other tech-related degree (or equivalent due to work experience)

Preferred Qualifications

  • 5+ years’ experience with vulnerability research

  • 3+ years’ experience with binary auditing and reverse engineering, and with related tools such as IDA Pro, Binary Ninja, Ghidra, etc. and with plugin development.

  • 3+ years’ experience with C/C++, and a scripting language (e.g., Python), and assembly (e.g., x86/x64, ARM, etc.)

  • 3+ years’ experience with common vulnerabilities and methods of exploitation, such as memory corruption, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.

  • Published technical contributions to the security community (e.g. CVEs, security advisories, blog posts (0-day/n-day analysis), open source contributions, academic publications, etc.)

  • Candidates with experience in vulnerability research in industrial control systems are encouraged to apply

  • Knowledge of common file format and network protocol structures.

  • Ability to work independently with minimum supervision and to tackle additional tasks as the need arises.

Why Cisco Secure

We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU.

Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.

We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!

There are so many amazing reasons to join Cisco. Learn more [1] here!

References

Visible links

Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.

Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.

Job Tags

Work experience placement, Remote job,

Similar Jobs

Palm Bay International

Fine Wine Consultant -Italian Specialist (MD/DC) Job at Palm Bay International

Fine Wine & Spirits Consultant, Italian Specialist (Washington DC, MD, VA) If interested in this opportunity, please complete this survey for full consideration: Palm Bay International, a dynamic family-owned company, offers one of the nations most... 

CONSTANTINE WINES Constantine Wines

Wine Consultant for Very Successful Territory Job at CONSTANTINE WINES Constantine Wines

 ...Job Description: WORK WHERE YOUR OPINIONS MATTER AND YOUR VOICE IS HEARD!! Constantine Wines is a leading distributor of fine wines serving the mid Atlantic since 1986 and have an outstanding opportunity available in Frederick, Carroll, and Washington Counties.... 

City of Wagner

Police Officer Job at City of Wagner

 ...Job Description Location: Wagner, SD The Wagner Police Department is accepting applications for full-time police officers. WPD is a proactive law enforcement agency seeking motivated candidates to serve the community. Wagner, South Dakota is located along SD Highway... 

Prospect Infosys Inc

Manual Tester Job at Prospect Infosys Inc

 ...related field. Experience in quality inspection, auditing, and testing. Strong computer skills and knowledge of QA databases and...  ...and monitor test scripts to assess functionality, reliability, performance, and quality of the service or product. Identify and remedy... 

Palo Duro Nursing Home

Housekeeper Job at Palo Duro Nursing Home

 ...primary purpose is to perform the day-to-day activities of the Housekeeping department in accordance with current Federal, State and local...  ...assignments. 3. Coordinate daily housekeeping services with nursing service when performing routine cleaning assignments in...