Security Engineer

Meet the Team

Join our dynamic and collaborative security engineering team. We are dedicated to safeguarding our products, cloud environments, and infrastructure by developing and executing robust software security controls. Our team thrives on innovation, continuous learning, and working together to intercept and prevent emerging security risks. We value diverse perspectives and are committed to building secure, resilient solutions that protect our customers and business.

Your Impact

As a Security Engineer, you will play a crucial role in defending our systems and applications against cybersecurity threats. You will design and develop security features for products and cloud environments, implementing appropriate security hardening for software, infrastructure, and build environments. By performing vulnerability assessments, threat analysis, and security code reviews, you will identify and mitigate potential design and implementation vulnerabilities. You will collaborate closely with cross-functional teams to resolve integration issues, execute security and compliance testing plans, and assist in incident response to security breaches. Your work will directly contribute to maintaining a secure development lifecycle and ensuring the highest standards of security across our platforms.

• Mentorship and Technical Leadership: Provide technical guidance and mentorship to junior team members, fostering a culture of continuous learning and high-quality security engineering practices.
• CI/CD Pipeline Security: Integrate automated security scanning and gatekeeping mechanisms into CI/CD pipelines to ensure that security is "shifted left" throughout the software development lifecycle.
• Documentation and Knowledge Sharing: Develop and maintain comprehensive documentation regarding security configurations, architecture patterns, and standard operating procedures to ensure team-wide alignment and operational consistency.
• Proactive Threat Hunting: Conduct proactive threat hunting exercises to identify and neutralize sophisticated or hidden threats within our infrastructure that traditional automated tools may overlook.
• Security Advocacy and Training: Serve as a security advocate within the organization, conducting training sessions or "lunch-and-learns" to improve the overall security awareness and coding practices of cross-functional development teams.

Minimum Qualifications

• Bachelor’s degree with 3+ years of related experience, or a Master’s degree with 3+ years of related experience working in cybersecurity engineering, infrastructure engineering, DevOps, or a large enterprise technology environment.
• Scripting or software-development experience using languages such as Python, Bash, JavaScript, Ruby, Perl, or similar.
• Experience with infrastructure-as-code or configuration-management tools such as Terraform, Puppet, Ansible, or similar technologies
• Linux administration experience, including command-line operations, fixing, configuration management, package management, and security hardening.
• Experience with security tools or capabilities such as endpoint protection, vulnerability management, asset visibility, cloud security, runtime security, security telemetry, or SIEM platforms.

Preferred Qualifications

• Familiarity with cloud security principles and securing environments such as AWS, Azure, or GCP.
• Experience with Kubernetes and containerized environments.
• Experience deploying, maintaining, monitoring, and solving production security infrastructure and services.
• Familiarity with EDR, vulnerability management, asset management, CSPM, admission control, runtime security, or file and process monitoring technologies
• Strong problem-solving skills with the ability to chip in to the resolution of straightforward business problems regarding security operations.

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. 

We are Cisco, and our power starts with you.