Security Engineer

8 years

Bengaluru

Posted:1 week ago

Apply

Job Description

Meet the Team.

Information Security Operations is responsible for protecting an organisation's infrastructure and data by implementing and enforcing security policies. They work closely with IT teams to identify and remediate security risks and ensure compliance with security standards. InfoSec Ops also fosters a security-conscious culture through training and awareness programmes, and they manage security-focused processes and technologies to safeguard the enterprise against evolving cyber threats. Their goal is to maintain a robust security posture while enabling business productivity, balancing security controls with operational needs.


Your Impact

Develops and executes software security controls, defences, and countermeasures to intercept and prevent security risks. Follows the Cisco Secure Development Lifecycle process as well as external security processes, as applicable. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities. Designs and develops security features for products or the cloud, which may include systems, applications, and/or solutions. Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third-party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs. Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security product requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks and responds to security incidents. Leads or participates in security architecture and design review meetings


Roles & Responsibilities.

  • Architects and leads in the deployment and enhancements of security tools, systems, and processes across their own business area (e.g., a BU, STO, or IT) or platform.
  • Typically completes high-complexity work to ensure integration between tools across the stack for defined products or portfolios.
  • Provides expertise in updates and implementation of Cisco and industry security practices, applicable architecture, and security engineering strategies across applicable teams and partners.
  • Applies a high level of knowledge of Cisco products and security weaknesses and collaborates across engineering and product teams to ensure prioritisation of fixes, balancing risk trade-offs and the changing threat landscape.
  • Continuously improves the approach, methodologies, and tools to proactively enforce security and testing assessments and to meet security standards.
  • Coordinates reporting and outputs of security assessments with internal and external resources (e.g., vendors, test labs, test equipment operators).
  • Performs threat analysis and determines mitigating and remediation capabilities.
  • Assesses inherent and residual threats and articulates/interprets results for stakeholders and applicable governing bodies.
  • May own the incident response to security breaches.
  • Works cross-functionally to address identified security risks, close out pending action plans, and set proactive plans in place.
  • Writes functional, clean detection content and unit tests at a level that sets the standard for coding across teams.
  • Influences architectural decisions with a focus on security, scalability, and reliability.
  • Contributes to threat modelling of a product.
  • Partners cross-functionally to proactively improve security architecture, documentation, tools, policies, methodologies, and activities.
  • Preemptively works with teams across Cisco to identify security needs and implement changes across the range of security aspects to ensure a reliable platform.
  • Architects' security controls to meet requirements and budgets.
  • Evaluate, assess, and verify the compliance of ports and protocols utilised by IT infrastructures, systems, platforms, applications, and network security devices (e.g., router Access Control Lists, firewall configuration, ports/protocols, etc.).
  • Demonstrate architectural understanding, but evaluate risks imposed on a secured environment by granting access permission in different security zones of architecture.
  • Evaluate risks in access permission involved in mergers and acquisitions, cloud connect and different cloud solutions.
  • Automate tasks including ACL checks, network policy adherence, analysing firewall rules, etc.
  • Develop knowledge base, refine processes for case handling, auditing based on best practices.


Minimum Qualifications

  • Typically requires an Engineering Degree in Computer Science or equivalent plus 8+ years of experience in areas similar to that laid out under roles/responsibilities.
  • In-depth knowledge in Networking & Security preferably evidenced through certifications and hands-on experience in assessing security risks for large enterprise networks
  • Prior experience in information security consulting with the understanding of how to analyse InfoSec policies


Preferred Qualifications

  • CISSP or any other equivalent security certification.

Skills Required

Information Security Security Controls Risk Assessments Threat Analysis Root Cause Analysis Third Party Software Engineering Security Architecture Design Review Security Engineering Incident Response Network Security

Learn the skills this job asks for

See your skill gap for Cybersecurity Analyst →

Free courses, interview questions and practice for each skill.

Job Type

Full Time

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now
Cisco logo
Cisco

Software Development

San Jose CA

RecommendedJobs for You

TeamViewer logo

Noida

LevelBlue logo

Bengaluru

SiFive logo

Bengaluru

Humyn Labs logo

Bengaluru

Fortius Tech Solutions logo

Security Engineer

Fortius Tech Solutions

Ahmedabad

Cisco Systems logo

Security Engineer

Cisco Systems

Bengaluru

Pune, Maharashtra, India