Threat Intelligence Investigator - Global Security & Executive Protection (Remote) 20010019

The application window is expected to close on: 05/01/2026Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Threat Intelligence Investigator, Global Security& Executive Protection (Remote) 20010019

Meet the Team The Global Executive Protection (GEXP) team primarily supports the security of the CEO and Executive Leadership Team at Cisco. We are Executive Protection professionals that work on the premise of making the unknown known, to ensure to the best of our abilities, the successful completion of each detail and protective coverage of the CEO/ELT. GEXP is part of the Security and Trust Organization.

The Role The Global Security& Executive Protection (GS) team is seeking a technical Threat Hunting Investigator to identify, investigate, and mitigate risks largely posed by internal actors - whether malicious, negligent, or compromised. This role provides direct support to conduct research and investigations into threats and incidents related to ELT/CEO, the digital protection of our ELT, and protection of critical intellectual property.

You will combatCritical IP Theft, and focus on digital protection efforts including research and investigation onThreats directed towards Cisco’s Executive Leadership Team (ELT).This role requires deep technical expertise, strong investigative judgment, and discretion.

You will proactively hunt for Insider Threats, evaluate threats directed at ELT, analyze complex datasets across multiple systems, and partner closely with security, Legal, HR, and compliance partners throughout the Security& Trust Organization to drive risk-based outcomes.

  • In this role, you will be working in an agile, fast-paced, and collaborative environment to:
  • Identify and focus on threat research and insider risk
  • Conduct threat hunting using logs, telemetry, and behavioral indicators across endpoints
  • Produce clear, defensible investigative reports
  • Support ELT incident response and mitigate critical IP theft
  • Draft and document internal solutions responsive to emerging insider risks
  • Conduct and document hands-on technical research on potential digital threats

Required Qualifications:

  • Bachelor's Degree in Computer Science, Information Systems, or a related field
  • 8-10 years of experience identifying and prioritizing sensitive information, evaluating threats, and implementing countermeasures
  • 8-10 years conducting digital threat investigations related to insider threats
  • 8-10 years conducting data triage and forensic analysis of endpoint devices
  • Deep technical expertise, strong investigative judgment, and discretion.

Desired Qualifications

  • Firm understanding of Cisco products and technologies, to include expert-level proficiency in Splunk and specific experience with Code42 and/or Microsoft Defender
  • 2+ years of experience in Counterintelligence (CI) or within a US Federal Government organization
  • Understanding of C/C++, Python, Verilog, and other source code languages
  • Strong written and verbal communication skills, with the ability to explain technical findings to non-technical stakeholders
Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.

Message to applicants applying to work in the U.S. and/or Canada:

The starting salary range posted for this position is $158,100.00 to $200,400.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation\, equity, or benefits.

Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process.

U.S. employees are offered benefit

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...