Security Engineer Jobs

About The Position

Requirements

• 3+ years professional experience in information security, with a focus on security engineering, with experience in securing hybrid infrastructures
• Experience in cloud platforms (e.g., Amazon AWS, GCP, Microsoft Azure), especially with securing multi-cloud networks
• Experience with secure coding practices, application security frameworks, threat modeling, risk assessments, and incident response
• Experience building scalable solutions which address security defects and/or optimize various tasks while employing AI solutions where necessary
• Experience addressing security gaps or inefficiencies through the creation of custom automation and tooling
• Must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee)
• This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil.

Nice To Haves

• Compliance experience including FedRAMP, SOC2, etc.
• A deep understanding of security principles, procedures and common vulnerabilities
• The ability to efficiently perform code reviews while contributing to the software development process to enable scale, reliability, and velocity in product releases
• A proactive mindset with the ability to identify and address security gaps or inefficiencies through the creation of custom automation and tooling
• A forward-thinking approach that continuously seeks out and addresses potential security weaknesses beyond the task at hand
• Experience with common security tools (Tenable, AWS-native security service, Burp Suite, etc.) along with familiarity with security protocols and encryption methods
• The ability to work independently while incorporating leadership input to identify the most effective path forward
• The ability to interpret results from security reports and create sustainable solutions
• The ability to identify security gaps and create automation to optimize ongoing testing and response
• Strong analytical and problem-solving skills, with an ability to think critically and objectively to assess security risks
• Excellent communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders

Responsibilities

• Identify security gaps and build out automation to optimize ongoing testing and response
• Analyze environments and identify potential risks for review by broader team
• Interpret results from various vulnerability reports and work on sustainable solutions
• Track remediation tasks across developers, product owners and business collaborators to ensure vulnerability management compliance

Benefits

• medical, dental and vision insurance
• a 401(k) plan with a Cisco matching contribution
• paid parental leave
• short and long-term disability coverage
• basic life insurance
• paid time away
• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
• 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
• 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees (non-exempt)
• flexible vacation time off program (exempt)
• 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
• additional paid time away may be requested to deal with critical or emergency issues for family members
• Optional 10 paid days per full calendar year to volunteer
• annual bonuses (for non-sales roles)
• performance-based incentive pay (for sales roles)
• grants of Cisco restricted stock units