Cisco XDR Engineer

- remote (must be in DFW for occasional onsite meetings)

- unfortunately, no visa sponsorship provided and no C2C available

A Cisco XDR (Extended Detection and Response) Cybersecurity Engineer specializes in designing, deploying, and managing Cisco’s XDR platform to detect, investigate, and respond to cyber threats across an organization’s environment.

• Implement and configure Cisco XDR solutions (Secure
  
  X, Secure Endpoint, Secure Network Analytics, etc.) to integrate with security tools and infrastructure.
• Monitor security events, alerts, and incidents to identify potential threats.
• Conduct threat hunting and incident response activities using Cisco’s XDR capabilities.
• Optimize detection rules, correlation logic, and automated response playbooks.
• Work with SOC teams to reduce false positives and improve mean time to detection/response (MTTD/MTTR).
• Provide reporting and analytics on security posture, threat trends, and incident handling.
• Ensure compliance with industry frameworks (NIST, ISO 27001, CIS, etc.).

• Strong knowledge of cybersecurity principles (threat detection, incident response, SIEM/XDR, SOC operations).
• Hands-on experience with Cisco Secure portfolio (Secure
  
  X, Umbrella, AMP for Endpoints, Secure Firewall, Secure Network Analytics, Talos Intelligence).
• Familiarity with integrations into third-party tools (Splunk, Microsoft Defender, Crowd Strike, etc.).
• Proficiency in scripting (Python, Power Shell) for automation and custom integrations.
• Certifications (nice-to-have):
  Cisco Cyber Ops, CCNP Security, CCIE Security, or Cisco XDR-specific training.