The successful applicant will be performing work in FedRAMP environments, and therefore, must be a U.S. Person (i.e. U.S.
citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S.
government has specified can only be performed by a U.S. citizen on U.S. soil.
Application window is expected to close 10 / 21 / 2024. What You'll Do :
Cisco Talos Intelligence Group is one of the largest commercial threat intelligence teams in the world. Talos defends Cisco customers against known and emerging threats, discovers new vulnerabilities in common software, and interdicts threats in the wild before they can further harm the internet at large.
As a Security Engineer on the Talos Security Operations Team, you will work to protect assets, systems, and intellectual property from threats and vulnerabilities.
You will monitor network and system performance, configurations, and security posture in an automated fashion up and down the stack and across a broad range of innovative technologies.
The Talos team is an empowered and collaborative group. We work in an agile / DevOps manner with a strong focus on customer success and protecting Talos & Cisco.
You will be positioned to have a significant impact within the group as you work closely with platform and data architects, software developers, system administrators, and data scientists / engineers.
Typical responsibilities include :
- Collaborate with development teams to build, deploy and maintain the entire Talos development Suite (ClamAV, Snort, Talos Intelligence, etc.)
- Contribute to design of security and compliance tests based on defined testing plans
- Identify security gaps and build out automation to optimize ongoing testing and response
- Analyze environment and identify potential risks for review by broader team
- Interpret results from threat reports and work on sustainability solutions
- Track remediation tasks across developers, product owners and business collaborators to ensure vulnerability management compliance
- Keep current on industry trends and Cisco and Industry processes
Who You Are :
You are a self-starter who can be counted on to be consistent, thorough, and systematic in securing our platform and services.
You tackle problems with a rational, logical approach and are comfortable working in a constantly evolving technical landscape.
You are also motivated to learn new tools and technologies that impact the security posture of the environment.
Minimum Qualifications for the Role :
- 3+ years professional experience in information security, with a focus on infrastructure, operating systems, and networking
- Experience in incident response and / or vulnerability management
- Experience with cloud security controls and / or securing cloud environments
Preferred Skills and Experience :
- Familiarity with security frameworks such as FedRAMP or any other government-related framework
- Experience working with DevOps practices and tools, integrating security into CI / CD pipelines
- Confirmed understanding of web APIs, both from a security testing standpoint as well as using to build scripts / tools and perform analysis tasks
- Experience with configuration management and automation tools (preferably Ansible and / or Terraform)
- OS and application vulnerability scanning tools experience (e.g. Qualys, Tenable, Burp, ZAP, etc.)
- Python (strongly preferred), bash, or other scripting for integration and automation
- Automation of monitoring for security, using Prometheus, Splunk, DataDog, etc.
- Experience securing, documenting, and ensuring security compliance for FedRAMP environments
- Deployment & security support of both cloud and virtual environments (AWS, vSphere, etc)
- Advanced degree in computer science or related technical field or equivalent experience
- Cybersecurity-related certification(s), including CCSP, CISSP, CISM, CEH, etc.
Why Cisco Secure :
We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security?
Those are only a few of our product teams! The only thing we're missing is YOU.
Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact.
We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.
We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!
There are so many amazing reasons to join Cisco. Learn more here!
Lead Information Security Engineer
A company is looking for a Lead Information Security Engineer to support cybersecurity compliance activities for government contracts. ...
Sr. Staff Product Security Engineer
We are looking for a senior software engineer to join our Product Security Engineering team. Improving authorization at scale, with considerations for security, engineering and operations. We help developers ship secure code by building security tools and services, providing security training and ex...
Security Engineer III
Key Responsibilities:Conduct compliance assessments and audits of information systemsRespond to security incidents and participate in the Security Incident Response TeamDeploy and manage security tools and educate business units on security processesRequired Qualifications:Bachelor's Degree in Infor...
Application Security Engineer
You'll work with Application Development teams to identify application assets, data flows, threats, and required cyber security controls, as well as with Application Security Testers to measure the effectiveness of identified cyber security controls. Evaluate and implement security tools and automat...
Senior Manager, Security Operations and Engineering
Security Operations and Incident Response: Expertise in managing Security Operations Centers (SOC), incident response, monitoring, and threat detection using tools like SIEM, EDR, and SOAR platforms to maintain operational security and manage cybersecurity incidents. The Senior Manager of Security O...
Information Security Engineer
Reporting to the DevOps Manager and working closely with the Engineering Manager and Security Manager, your duties will range from answering data security questionnaires from existing customers or prospects, to working on new requirements stemming from certifications such as FedRAMP that we are acti...
Lead Security Engineer
As a Lead Security Engineer at JPMorgan Chase within the Cybersecurity Organization, you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavio...
Truck Gate Security Officer -1st & 2nd Shifts
At the core of Security Engineers, we have a team of trained and professional Security Officers who serve as the backbone of our operations. Security Engineers is a respected provider of contract security services, operating across multiple States. As Security Engineers continues to grow, we activel...
Systems Engineer Sr Staff - Level 5 - Security Clearance Required
Expectations include building and maintaining routine relationships with C-130J Engineering leadership, system/subsystem engineering teams, Supply Chain, Business Management, Program Management, Sustainment Operations, Hardware and Software Suppliers, C-130J Customers, and all associate parties invo...
Senior Security Engineer
This role will assist in evaluating creating and implementing security standards processes and procedures related to access control application security cloud security endpoint security and network security. Performs information security risk assessments of internally developed solutions and cloudba...