Security Engineer

About the role

Cisco is looking for a Security Engineer to defend its systems and applications against cybersecurity threats. The role covers designing and developing security features for products and cloud environments, hardening software, infrastructure and build environments, and working with cross-functional teams to keep the security development lifecycle secure.

Key responsibilities

• Perform vulnerability assessments, threat analysis and security code reviews to identify and mitigate design and implementation weaknesses.
• Mentor junior team members and share knowledge through documentation of security configurations, architecture patterns and standard operating procedures.
• Integrate automated security scanning and gatekeeping into CI/CD pipelines to shift security left.
• Run proactive threat-hunting exercises to find hidden threats missed by automated tools.
• Act as a security advocate, running training sessions and lunch-and-learns for development teams.
• Help resolve integration issues, run security and compliance tests and support incident response.

Required profile

• Bachelor's degree with 3+ years of related experience, or a Master's degree with 3+ years in cybersecurity engineering, infrastructure engineering, DevOps or a large enterprise technology environment.
• Scripting or software development experience in Python, Bash, JavaScript, Ruby, Perl or similar.
• Experience with infrastructure-as-code or configuration-management tools such as Terraform, Puppet or Ansible.
• Linux administration, including command-line operations, fixing, configuration management, package management and security hardening.
• Experience with security tools such as endpoint protection, vulnerability management, asset visibility, cloud security, runtime security, security telemetry or SIEM platforms.

Preferred qualifications

• Familiarity with cloud security on AWS, Azure or GCP.
• Experience with Kubernetes and containerized environments.
• Experience deploying, maintaining and monitoring production security infrastructure.
• Familiarity with EDR, CSPM, admission control, file and process monitoring.