Security Engineer

The successful applicant will provide ownership of and be performing work in FedRAMP or IL-5 type environments, and therefore, must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil.

Meet the Team

The Talos team is an empowered and collaborative group. We work in an agile/DevOps manner with a strong focus on customer success and protecting Talos & Cisco. You will be positioned to have a significant impact within the group as you work closely with platform and data architects, software developers, system administrators, and data scientists/engineers.

Cisco Talos Intelligence Group is one of the largest commercial threat intelligence teams in the world. Talos defends Cisco customers against known and emerging threats, discovers new vulnerabilities in common software, and interdicts threats in the wild before they can further harm the internet at large.

Your Impact

As a Security Engineer on the Talos Security Operations Team, you will work in a blue team capacity to protect assets, systems, the network and intellectual property from threats and vulnerabilities. You will monitor network and system performance, configurations, and security posture in an automated fashion up and down the stack and across a broad range of innovative technologies.

You are a creative self-starter who can be counted on to be consistent, thorough, and systematic in securing our platform and services. You innovatively tackle problems with a rational, logical approach and are comfortable working in a constantly evolving technical landscape. You are also motivated to learn new tools and technologies that impact the security posture of the environment.

Typical responsibilities include:

• Creating and contributing to detection tools to enhance the security of the network and infrastructure
• Collaborating with development teams to build, deploy and maintain the entire Talos development Suite (ClamAV, Snort, Talos Intelligence, etc.)
• Contribute to design of security and compliance tests based on defined testing plans
• Identify security gaps and build out automation to optimize ongoing testing and response
• Analyze environment and identify potential risks for review by broader team
• Interpret results from threat reports and implement sustainable solutions
• Keep current on industry trends and Cisco and Industry processes

Minimum Qualifications

• Bachelor's degree in engineering, cybersecurity, or 4+ years' equivalent professional experience
• 3+ years of programming experience in one or more general purpose languages, python is a plus
• 3+ years of experience on a Security Operations team, coordinating responses to security events and programmatically preventing recurrence
• Experience in information security, with a focus on creating detections and automations to secure infrastructure, operating systems, and the network
• Experience with cloud security controls and/or securing cloud environments

Preferred Qualifications

• Familiarity with security frameworks such as FedRAMP or any other government-related framework
• Experience securing, documenting, and ensuring security compliance for FedRAMP environments
• Experience working with DevOps practices and tools, integrating security into CI/CD pipelines
• Confirmed understanding of web APIs, both from a security testing standpoint as well as using to build scripts/tools and perform analysis tasks
• Experience with configuration management and automation tools (preferably Puppet, Ansible and/or Terraform)
• Possesses a strong combination of troubleshooting, technical and communication skills
• Python (strongly preferred), bash, or other scripting for integration and automation
• Automation of monitoring for security, using AWS-native tooling, Splunk, Datadog, etc.
• Deployment & security support of both cloud and virtual environments (AWS, vSphere, etc)
• Advanced degree in computer science or related technical field or equivalent experience
• Certification(s), including AWS certifications, CCSP, CISSP

Why Cisco?

At Cisco, we're revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond. We've been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Simply put - we power the future.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you'll see that the opportunities to grow and build are limitless. We work as a team, collaborating with

empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.