Security Engineer It Infrastructure (Remote)

Title: Security Engineer IT Infrastructure

What you ll Do

You will be responsible for security engineering and operations for Cisco IT infrastructure.

You will participate in our Security cross-functional team of Security Advocates. You will help implement policy across Cisco IT infrastructure. You will work with Security and Trust to determine areas of improvement and work with engineers to develop solutions. You ll be responsible for validating our security posture for patching, vulnerability scanning, software development, and opensource software. You will be a point of contact for security issues, incident response plans, vulnerability management, and implementing security solutions.

You will be a technical resource for implementing security into all aspects of Cisco IT engineering including code development. Integrating good coding practices, integrated scans with tools like SonarQube and Tenable, reviewing code analytics to make sure issues are being addressed before release, and ensuring all security requirements before a feature is released. Participate in strategy definition and maintenance of the roadmap for the adoption, expansion, and integration of security monitoring platforms. Participate in incident response investigations and response activity.

Who you will work with

You ll work with Agile Scrum teams to securely deliver our programmable infrastructure for private and public cloud solutions.

You will partner with our Security Architects across infrastructure, driving security improvements across compute, storage, containers, and platform services.

You ll collaborate extensively with Infrastructure teams, Global Risk and Compliance, Security and Trust, Networking, and Application teams to create and implement security policy. You will work with engineers and leaders across these areas.

Responsibilities:

• You will be responsible for security engineering and operations for Cisco IT infrastructure.

• You will participate in our Security cross-functional team of Prime Security Advocates.

• You will help implement policy across Cisco IT infrastructure. You will work with Security and Trust to determine areas of improvement and work with engineers to develop solutions.

• You ll be responsible for validating our security posture for patching, vulnerability scanning, software development, and opensource software.

• You will be a point of contact for security issues, incident response plans, vulnerability management, and implementing security solutions.

• You will be a technical resource for implementing security into all aspects of Cisco IT engineering including code development. Integrating good coding practices, integrated scans, reviewing code analytics to make sure issues are being addressed before release, and ensuring all security requirements before a feature is released.

• Participate in strategy definition and maintenance of the roadmap for the adoption, expansion, and integration of security monitoring platforms. Participate in incident response investigations and response activity.

Who You Are

You are an excellent Security Engineer with design, development, deployment, and support experience building tools and apps using modern software practices. You have a solid background in and understanding of infrastructure and application systems with strong security experience with the ability to work closely with cross-functional teams from the early stages of design all the way through identifying and resolving production issues. You have experience developing security solutions around access and role-based controls. You re passionate about this role and also believe that automation is key to operating large scale systems. You re flexible and willing to learn new things in a fast-paced environment.

Required Skills and Experience

• Solid familiarity with Linux security concepts

• Experience with data center network security zoning concepts using network segmentation and virtualization

• Understanding of private and public cloud infrastructure and what it takes to run infrastructure as code

• Passionate about Security and implementing it across DevOps

• Security scanning tools like Qualys, Tenable, Rapid7

• Experience with privileged access management tools like Cyberark

• Understanding of directory services like Active Directory and LDAP

• Working in a 24×7 production environment

• Experienced with software development process, vendor engagement, and product evaluations.

• Experience developing features in an agile development environment

Desired Skills

• Experience with Linux and Windows CIS benchmarks and hardening

• Exposure with CI/CD tools and continuous integration Github, Jenkins, etc.

• Good understanding of network technologies like Firewalls, Routing, and Switching

• Experience with deploying applications to and managing infrastructure in public clouds (e.g. AWS, Google Cloud Platform) and private clouds (e.g. VMWare, OpenStack, OpenShift)

• Experience using Monitoring and Logging tools like Splunk, Prometheus, InfluxDB, and Elasticsearch

• Knowledge of GitOps, Terraform and Ansible Automation

• Cisco ACI (Application Centric Infrastructure) or other Software-Defined Data Center architecture experience a plus