security engineer in software security

Описание:

Cisco develops solutions that connect and protect data and infrastructure across physical and digital environments. Its products provide customers with security, visibility, and insights across their digital footprint.

Задачи:

• Build and deploy tools to detect vulnerabilities in Isovalent software

• Tune security tools to focus on the most valuable signals

• Establish consistent security processes across development teams

• Triage findings from LLMs, SAST/DAST scanners, cloud security scanners, external security reports, and pentests

• Own the continuous improvement of security processes with a strong focus on metrics

• Assess the technical nature of vulnerabilities and clearly communicate their risks

• Evaluate proposed security solutions and prioritize work based on security risk

• Partner with development, release, and security teams to address vulnerabilities promptly

• Document the security posture of products

• Advocate for security best practices.

Требования:

• Technical background in information security or a related field

• Significant knowledge of Linux security concepts

• Significant experience automating security processes with Go, Python, Bash, or IaC tools such as Terraform

• Experience identifying, validating, and organizing security vulnerabilities

• Demonstrable experience leading security projects from design to delivery

• Excellent organizational, communication, and stakeholder management skills

• Nice to have: background in network security, experience integrating LLMs into security scanning pipelines, experience configuring fuzzers and/or DAST scanning tools, familiarity with Kubernetes and cloud environments such as AWS, Azure, or GCP.

Условия:

Office role in Berlin, Germany.