Senior Security Engineer

About the Job
Cisco's Secure Workload product, formerly known as Cisco Tetration, is a comprehensive workload protection solution that provides security for applications across various environments, including on-premises data centers and public or private clouds. It ensures consistent security policies throughout the infrastructure, enabling organizations to track application behavior, automate security policies, and protect workloads from threats.

We are seeking a Senior Security Engineer to enhance compliance efforts and ensure the security and auditability of Cisco Secure Workload. This role is essential in ensuring the organization meets Cisco and industry standards while maintaining a strong security posture.

Responsibilities

• Develop, maintain, and manage tools and evidence required for security compliance within Cisco Secure Workload.
• Lead the design, development, and implementation of automated processes for evidence collection and compliance reporting.
• Establish and manage evidence retention policies aligned with security frameworks, designing and maintaining automated collection processes for efficiency and accuracy.
• Collaborate on data integration to embed these processes into existing systems, ensuring continuous improvement for reliability and scalability.
• Maintain meticulous documentation and manage a well-organized evidence repository for audit readiness.
• Develop a detailed evidence collection strategy for Cisco Secure Workload, validate evidence integrity with internal teams, and promote security awareness across departments.
• Proactively improve evidence collection methods and support compliance audits with necessary documentation.

Who You'll Work With
You will be part of an experienced team of engineers focused on developing sophisticated security products, specifically within the Secure Workload Engineering team. This team's mission is to empower engineers by providing quality tools, frameworks, and processes to continuously deliver high-quality, secure code.

Who You Are
You possess excellent problem-solving and resolution skills, thrive in fast-paced environments, and have outstanding written and verbal communication abilities. A proactive individual, you set a strong example and adapt to constantly evolving work landscapes.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 8+ years of experience in DevOps, Software Development, and/or DevSecOps.
• Engineering or development experience with proficiency in scripting and automation tools (e.g., Python).
• Strong experience with Unix/Linux system administration.
• Experience in cloud security and operations, preferably in Google Cloud Platform (GCP), AWS, or Azure environments.

Preferred Qualifications

• Strong understanding of security frameworks (e.g., SOC2, FIPS140), controls, and compliance requirements.
• Knowledge of GCP security standard methodologies, controls, and compliance standards.
• Experience in collecting evidence for security compliance within cloud environments.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification is a plus.
• Experience in crafting and implementing automated processes for security compliance projects.

Compensation
The expected salary range for this position is between $140,400 and $200,700 per year, based on skills, experience, and location.

Why Cisco
At Cisco, we are committed to creating an inclusive future for everyone. We celebrate diversity and prioritize equality within our workforce. Our employees contribute to innovative technology, making powerful connections in various sectors such as business, education, and healthcare. Cisco values individuality and is dedicated to supporting our communities while encouraging personal expression.

Join us in making a difference with technology while being your authentic self!