Security Engineer

Meet the Team.

Information Security Operations is responsible for protecting an organisation's infrastructure and data by implementing and enforcing security policies. They work closely with IT teams to identify and remediate security risks and ensure compliance with security standards. InfoSec Ops also fosters a security-conscious culture through training and awareness programmes, and they manage security-focused processes and technologies to safeguard the enterprise against evolving cyber threats. Their goal is to maintain a robust security posture while enabling business productivity, balancing security controls with operational needs.

Your Impact

Develops and executes software security controls, defences, and countermeasures to intercept and prevent security risks. Follows the Cisco Secure Development Lifecycle process as well as external security processes, as applicable. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities. Designs and develops security features for products or the cloud, which may include systems, applications, and/or solutions. Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third-party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs. Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security product requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks and responds to security incidents. Leads or participates in security architecture and design review meetings

Roles & Responsibilities.

• Architects and leads in the deployment and enhancements of security tools, systems, and processes across their own business area (e.g., a BU, STO, or IT) or platform.
• Typically completes high-complexity work to ensure integration between tools across the stack for defined products or portfolios.
• Provides expertise in updates and implementation of Cisco and industry security practices, applicable architecture, and security engineering strategies across applicable teams and partners.
• Applies a high level of knowledge of Cisco products and security weaknesses and collaborates across engineering and product teams to ensure prioritisation of fixes, balancing risk trade-offs and the changing threat landscape.
• Continuously improves the approach, methodologies, and tools to proactively enforce security and testing assessments and to meet security standards.
• Coordinates reporting and outputs of security assessments with internal and external resources (e.g., vendors, test labs, test equipment operators).
• Performs threat analysis and determines mitigating and remediation capabilities.
• Assesses inherent and residual threats and articulates/interprets results for stakeholders and applicable governing bodies.
• May own the incident response to security breaches.
• Works cross-functionally to address identified security risks, close out pending action plans, and set proactive plans in place.
• Writes functional, clean detection content and unit tests at a level that sets the standard for coding across teams.
• Influences architectural decisions with a focus on security, scalability, and reliability.
• Contributes to threat modelling of a product.
• Partners cross-functionally to proactively improve security architecture, documentation, tools, policies, methodologies, and activities.
• Preemptively works with teams across Cisco to identify security needs and implement changes across the range of security aspects to ensure a reliable platform.
• Architects security controls to meet requirements and budgets.
• Evaluate, assess, and verify the compliance of ports and protocols utilised by IT infrastructures, systems, platforms, applications, and network security devices (e.g., router Access Control Lists, firewall configuration, ports/protocols, etc.).
• Demonstrate architectural understanding, but evaluate risks imposed on a secured environment by granting access permission in different security zones of architecture.
• Evaluate risks in access permission involved in mergers and acquisitions, cloud connect and different cloud solutions.
• Automate tasks including ACL checks, network policy adherence, analysing firewall rules, etc.
• Develop knowledge base, refine processes for case handling, auditing based on best practices.

Minimum Qualifications

• Typically requires an Engineering Degree in Computer Science or equivalent plus 8+ years of experience in areas similar to that laid out under roles/responsibilities.
• In-depth knowledge in Networking & Security preferably evidenced through certifications and hands-on experience in assessing security risks for large enterprise networks
• Prior experience in information security consulting with the understanding of how to analyse InfoSec policies

Preferred Qualifications

• CISSP or any other equivalent security certification.