Security Engineer

Meet the Team

Information Security Operations is responsible for protecting an organisation's infrastructure and data by implementing and carrying out security policies. They work closely with IT teams to identify and remediate security risks and ensure compliance with security standards. InfoSec Ops also develops a security-conscious culture through training and awareness programmes, and they handle security-focused processes and technologies to safeguard the enterprise against evolving cyber threats. Their goal is to maintain a robust security posture while enabling business efficiency, balancing security controls with operational needs.

Your Impact

Develops and executes software security controls, defences, and countermeasures to intercept and prevent security risks. Follows the Cisco Secure Development Lifecycle process as well as external security processes, as applicable. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities. Builds and develops security features for products or the cloud which may include systems, applications, and/or solutions. Analyses and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third-party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs. Resolves and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security product requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks and responds to security incidents. Leads or participates in security architecture and design review meetings

Roles & Responsibilities.

• Architects and leads deployment and improvements of security tools, systems, and processes across their own business area (e.g., a BU, STO, or IT) or platform.
• Typically completes high-complexity work to ensure integration between tools across the stack for defined products or portfolios.
• Guides in updates and implementation of Cisco and industry security practices, applicable architecture, and security engineering strategies across applicable teams and partners.
• Applies a high level of knowledge of Cisco products and security weaknesses and collaborates across engineering and product teams to ensure prioritisation of fixes, balancing risk trade-offs and the changing threat landscape.
• Continuously improves the approach, methodologies, and tools to proactively carry out security and testing assessments and to meet security standards.
• Coordinates reporting and outputs of security assessments with internal and external resources (e.g., vendors, test labs, test equipment operators).
• Performs threat analysis and resolves mitigating and remediation capabilities.
• Assesses inherent and residual threats and articulates/interprets results for stakeholders and applicable governing bodies.
• May be responsible for the incident response to security breaches.
• Works cross-functionally to address identified security risks, close out pending action plans, and set proactive plans in place.
• Writes functional, clean detection content and unit tests at a level that sets the standard for coding across teams.
• Influences architectural decisions with a focus on security, scalability, and reliability.
• Contributes to threat modelling of a product.
• Partners cross-functionally to proactively improve security architecture, documentation, tools, policies, methodologies, and activities.
• Preemptively works with teams across Cisco to identify security needs and implement changes across the range of security aspects to ensure a reliable platform.
• Architects' security controls to meet requirements and budgets.
• Evaluate, assess, and verify the compliance of ports and protocols utilised by IT infrastructures, systems, platforms, applications, and network security devices (e.g., router Access Control Lists, firewall configuration, ports/protocols, etc.).
• Demonstrate architectural understanding, but evaluate risks imposed on a secured environment by granting access permission in different security zones of architecture.
• Evaluate risks in access permission involved in mergers and acquisitions, cloud connect and different cloud solutions.
• Automate tasks including ACL checks, network policy alignment, analysing firewall rules, etc.
• Develop knowledge base, refine processes for case handling, auditing based on standard methodologies.

Minimum Qualifications

• Typically requires an Engineering Degree in Computer Science or equivalent plus 8+ years of experience in areas similar to that laid out under roles/responsibilities.
• In-depth knowledge in Networking & Security preferably evidenced through certifications and hands-on experience in assessing security risks for large enterprise networks
• Prior experience in information security consulting with the understanding of how to analyse InfoSec policies

Preferred Qualifications

• CISSP or any other equivalent security certification.

#WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company and many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best but also be their best.

We understand our outstanding opportunity to bring communities together, and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organisations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer—80 hours each year—allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.

Disclaimer

To ensure that we hire the best talent in the right way, we follow a strict hiring process and recently, Cisco has been made aware of fraudulent recruiters claiming to be from the company. Please be advised that any communication from Cisco about careers will:

• be in direct response to an application you have submitted through the company career site
• begin with screening or an interview
• originate from a Cisco email address, and
• be conducted across email, phone, or WebEx

Cisco will never make a job offer without conducting an interview process or ask you for money in any way. If you have been requested to apply for a role or have received an offer from a site other than https://careers.cisco.com or cisco.wd5.myworkday.com, do not provide any personal identifying information, including your Aadhaar or other personal identifying number, birth certificate, banking information, driver's license, or passport.

If you are the target of a recruiting scam, consider filing a report with your local law enforcement authorities. Cisco bears no responsibility, and cannot be held liable, for any claims, damages, expenses, or other inconvenience resulting from or in any way connected to recruiting scams.