security engineer in software security

Описание:

Cisco develops solutions that connect and protect data and infrastructure across physical and digital environments. Its products provide customers with security, visibility, and insights across their digital footprint.

Задачи:

• Build and deploy tools to detect vulnerabilities in Isovalent software
• Tune security tools to focus on the most valuable signals
• Establish consistent security processes across development teams
• Triage findings from LLMs, SAST/DAST scanners, cloud security scanners, external security reports, and pentests
• Own the continuous improvement of security processes with a strong focus on metrics
• Assess the technical nature of vulnerabilities and clearly communicate their risks
• Evaluate proposed security solutions and prioritize work based on security risk
• Partner with development, release, and security teams to address vulnerabilities promptly
• Document the security posture of products
• Advocate for security best practices.

Требования:

• Technical background in information security or a related field
• Significant knowledge of Linux security concepts
• Significant experience automating security processes with Go, Python, Bash, or IaC tools such as Terraform
• Experience identifying, validating, and organizing security vulnerabilities
• Demonstrable experience leading security projects from design to delivery
• Excellent organizational, communication, and stakeholder management skills
• Nice to have: background in network security, experience integrating LLMs into security scanning pipelines, experience configuring fuzzers and/or DAST scanning tools, familiarity with Kubernetes and cloud environments such as AWS, Azure, or GCP.

Условия:

Office role in Berlin, Germany.