IT Security Engineer

Acacia, part of Cisco Systems, is hiring an IT Security Engineer to strengthen day-to-day security operations for global environments. This onsite role in Maynard, MA focuses on practical security execution across identity, vulnerability management, and endpoint protection, with close collaboration across Infrastructure and Network teams.

In this position, you will manage the vulnerability lifecycle, triage security alerts, and contribute to consistent security operations through runbooks and operational procedures. You will also support Privileged Access Management (PAM) improvements and help ensure teams can respond effectively using monitoring platforms and incident workflows.

• Lead day-to-day security operations, with emphasis on identity security
  , vulnerability management
  , and endpoint protection to support a resilient security posture for global operations.
• Own the vulnerability lifecycle and triage security alerts to mitigate threats in real time.
• Partner with Infrastructure and Network teams to improve Privileged Access Management (PAM) processes that protect sensitive data.
• Develop and refine security runbooks and operational procedures to drive consistent, repeatable standards across all sites.

• Bachelor’s degree and 5 years of professional experience in security operations, infrastructure security, or identity management.
• Experience managing the end-to-end vulnerability lifecycle, including scanning, tracking, and verifying remediation
  .
• Active Directory administration
  , including group policy management and maintaining access control hygiene.
• Ability to triage and respond to security incidents using SIEM, EDR, or similar monitoring platforms
  .
• Capability to create and maintain technical security runbooks or operational procedures.

• Active Directory
• SIEM, EDR
• Crowd Strike
• Sentinel One
• Tenable
• Rapid7
• Cisco Umbrella
• Zscaler
• Splunk

• Use endpoint security platforms (such as Crowd Strike and Sentinel One
  ) to monitor, harden, and maintain server and workstation security health.
• Run vulnerability management campaigns with tools like Tenable or Rapid7
  , including tracking, reporting, and driving remediation across cross-functional teams.
• Implement and manage DNS security strategies using platforms such as Cisco Umbrella or Zscaler
  .
• Analyze logs and security events in platforms like Splunk to identify, triage, and elevate potential security incidents.
• Apply data classification and Data Loss Prevention (DLP) strategies to identify and protect critical information across enterprise environments.

• Location: Maynard, MA (onsite)
• Salary: USD 116,600
  - 191,200 per year

• Medical, dental and vision insurance
• 401(k) plan with a Cisco matching contribution
• Paid parental leave
• Short and long-term disability coverage
• Basic life insurance
• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
• 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
• Non-exempt employees receive 16 days of paid vacation time per full calendar year, accrued at 4.92 hours per pay period for full-time employees
• Exempt employees participate in Cisco’s flexible vacation time off program with no defined limit on eligible vacation usage (subject to availability and business limitations)
• 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward
• Additional paid time away may be requested to handle critical or emergency issues for family members
• Optional 10 paid days per full calendar year to volunteer
• Eligibility for grants of Cisco restricted stock units,…