Threat Intelligence Investigator - Executive Protection, Insider Threats, Intellectual Property (Remote) 20010019

The application window is expected to close on: 10/29/2026 Threat Intelligence Investigator - Executive Protection, Insider Threats, Intellectual Property Meet the Team The Global Executive Protection (GEXP) team primarily supports the security of the CEO and Executive Leadership Team at Cisco. We are Executive Protection professionals that work on the premise of making the unknown known, to ensure to the best of our abilities, the successful completion of each detail and protective coverage of the CEO/ELT. GEXP is part of the Security and Trust Organization.

The Global Security & Executive Protection (GS&EP) team is seeking a technical Threat Hunting Investigator to identify, investigate, and mitigate risks largely posed by internal actors - whether malicious, negligent, or compromised. This role provides direct support to conduct research and investigations into threats and incidents related to ELT/CEO, the digital protection of our ELT, and protection of critical intellectual property.   You will combat Critical IP Theft , and focus on digital protection efforts including research and investigation on Threats directed towards Cisco’s Executive Leadership Team (ELT). This role requires deep technical expertise, strong investigative judgment, and discretion. You will proactively hunt for Insider Threats , evaluate threats directed at ELT, analyze complex datasets across multiple systems, and partner closely with security, Legal, HR, and compliance partners throughout the Security & Trust Organization to drive risk-based outcomes.   In this role, you will be working in an agile, fast-paced, and collaborative environment to:  Identify and focus on threat research and insider risk  Conduct threat hunting using logs, telemetry, and behavioral indicators across endpoints  Produce clear, defensible investigative reports  Support ELT incident response and mitigate critical IP theft  Draft and document internal solutions responsive to emerging insider risks  Conduct and document hands-on technical research on potential digital threats  Required Qualifications:  Bachelor's Degree in Computer Science, Information Systems, or a related field  8-10 years of experience identifying and prioritizing sensitive information, evaluating threats, and implementing countermeasures  8-10 years conducting digital threat investigations related to insider threats  8-10 years conducting data triage and forensic analysis of endpoint devices  Deep technical expertise, strong investigative judgment, and discretion.

Firm understanding of Cisco products and technologies, to include expert-level proficiency in Splunk and specific experience with Code42 and/or Microsoft Defender  2+ years of experience in Counterintelligence (CI) or within a US Federal Government organization  Understanding of C/C++, Python, Verilog, and other source code languages  Strong written and verbal communication skills, with the ability to explain technical findings to non-technical stakeholders  Why Cisco?  At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.  We are Cisco, and our power starts with you.  Message to applicants applying to work in the U.S. and/or Canada: The