Security Engineer

Overview

Security Engineer role in Cisco's Information Security Operations team, protecting the organisation's infrastructure and data by implementing security controls, assessing risks, and responding to threats.

What you'll do

• Develop and execute software security controls, defences, and countermeasures to intercept and prevent security risks.
• Follow the Cisco Secure Development Lifecycle process and external security processes, as applicable.
• Perform security assessments, which may include vulnerability and risk assessments, threat analysis, and security code reviews.
• Design and develop security features for products or the cloud, which may include systems, applications, and/or solutions.
• Research and evaluate cybersecurity threats and perform root cause analysis, which may involve implementing and deploying third-party software.
• Provide security software engineering recommendations and resolve integration and testing issues with Cisco BUs.
• Determine and implement appropriate security hardening, including for software, infrastructure, and build environments.
• Build a standardised set of security product requirements and produce metrics to report performance against them.
• Detect and mitigate security risks and respond to security incidents; may own the incident response to security breaches.
• Lead or participate in security architecture and design review meetings.
• Architect and lead deployment and enhancement of security tools, systems, and processes across the business area or platform.
• Typically complete high-complexity work to ensure integration between tools across the stack for defined products or portfolios.
• Provide expertise in updates and implementation of Cisco and industry security practices, architecture, and security engineering strategies.
• Collaborate across engineering and product teams to prioritise fixes, balancing risk trade-offs and the changing threat landscape.
• Continuously improve approaches, methodologies, and tools to proactively enforce security and meet security standards.
• Coordinate reporting and outputs of security assessments with internal and external resources (e.g., vendors, test labs, test equipment operators).
• Perform threat analysis, determine mitigating and remediation capabilities, and assess inherent and residual threats.
• Work cross-functionally to address identified security risks, close out pending action plans, and set proactive plans.
• Write functional, clean detection content and unit tests.
• Influence architectural decisions with a focus on security, scalability, and reliability.
• Contribute to threat modelling of a product.
• Partner cross-functionally to proactively improve security architecture, documentation, tools, policies, methodologies, and activities.
• Architect security controls to meet requirements and budgets.
• Evaluate, assess, and verify compliance of ports and protocols used by IT infrastructures, systems, platforms, applications, and network security devices (e.g., router ACLs, firewall configuration).
• Evaluate risks imposed on a secured environment by granting access permissions across security zones of architecture.
• Evaluate access permission risks involved in mergers and acquisitions, cloud connect, and different cloud solutions.
• Automate tasks including ACL checks, network policy adherence, and analysis of firewall rules.
• Develop knowledge base and refine processes for case handling and auditing based on best practices.

What you'll need

• Engineering degree in Computer Science or equivalent, plus 8+ years of experience in areas similar to those under roles and responsibilities.
• In-depth knowledge of Networking & Security, preferably evidenced through certifications and hands-on experience assessing security risks for large enterprise networks.
• Prior experience in information security consulting, with an understanding of how to analyse InfoSec policies.

Nice to have

• CISSP or any other equivalent security certification.

Details

• Location: Bangalore, India.