Security Research Engineer

Cisco is a leading technology company revolutionizing how data and infrastructure connect and protect organizations. They are seeking a Security Research Engineer to evaluate global products and services for security vulnerabilities, collaborate with engineering teams, and develop innovative security solutions.

Responsibilities:

• Evaluate global products and services to identify security vulnerabilities, weaknesses, and improvements
• Learn to adopt an attacker mentality using tools, techniques, and processes that emulate real-world adversaries
• Work with amazingly creative, innovative, and collaborative security researchers to develop evolving ethical hacking skills and networking product knowledge
• Partner with Cisco's industry-leading engineering teams to assess the latest system and application architectures, contribute to creative security solutions, and gain unparalleled access to and experience with the latest technologies
• Opportunities to research security topics independently or collaboratively to explore and develop tools and ideas as part of our "Free Friday" innovation and incubation process

Requirements:

• 2+ years of software engineering experience with C, C++, Perl, Raku and Python/Ruby, with experience in secure coding/development and code analysis for vulnerabilities
• 2+ years of experience with network protocols through implementation or analysis
• 2+ years of security testing experience, including areas like web applications, APIs, user interfaces, and embedded devices
• 2+ years of BSD Unix experience with an intermediate understanding of security hardening configurations and capabilities
• Experience with operating system concepts in the areas of memory management, computer architecture, or binary analysis
• 2+ years of experience with applied crypto, through implementation or analysis of crypto algorithms
• 2+ years of experience as a DevOps engineer, with a focus on DevOps security
• OSCP or other industry certifications are a plus
• Secure development practices
• Security of virtualization platforms and techniques