Senior Security Engineer - Isovalent

Cisco; Brussel; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Cisco in Brussels is seeking a security engineer to ensure best practices in the software development lifecycle. You will build and deploy tools to detect vulnerabilities and tune them to focus on the most valuable signals.

You will triage findings from SAST/DAST scanners, cloud security tools, and external reports, and you will work with development, release, and security teams to improve processes with measurable security metrics.

Qualifications

• Strong background in information security and Linux security concepts.
• Experience automating security processes with Go, Python, Bash or IaC tools like Terraform.
• Proven track record leading security projects from design to delivery.
• Excellent organizational, communication, and stakeholder management skills.

Responsabilités

• Build and deploy tools to detect vulnerabilities in Isovalent software.
• Triage findings from SAST/DAST scanners, cloud security scanners, and reports.
• Continuously improve security processes with a metrics-driven approach.
• Collaborate with development, release, and other security teams to address vulnerabilities promptly.

Connaissances

Linux security concepts

Automation scripting (Go/Python/Bash)

Security project leadership

Stakeholder communication

Outils

Terraform

Kubernetes

Description du poste

Your Impact

Your role will be to ensure that Isovalent applies industry-leading security practices in its software development lifecycle. As part of this, you will build and/or deploy the best tools to detect vulnerabilities in Isovalent software, and tune those tools to ensure that we are focusing on the most valuable signals. You will provide consistency to development teams to ensure that all product teams are able to follow the same security processes across their work. You will triage findings from a variety of sources, including LLMs, traditional SAST/DAST scanners, cloud security scanners, external security reports, and pentests. You will take ownership of continuously improving our security processes to ensure that we are identifying and focusing on the security issues with the most impact at all times, with a strong focus on metrics.

Your Impact

Your role will be to ensure that Isovalent applies industry-leading security practices in its software development lifecycle. As part of this, you will build and/or deploy the best tools to detect vulnerabilities in Isovalent software, and tune those tools to ensure that we are focusing on the most valuable signals. You will provide consistency to development teams to ensure that all product teams are able to follow the same security processes across their work. You will triage findings from a variety of sources, including LLMs, traditional SAST/DAST scanners, cloud security scanners, external security reports, and pentests. You will take ownership of continuously improving our security processes to ensure that we are identifying and focusing on the security issues with the most impact at all times, with a strong focus on metrics. You will have a strong technical understanding of the nature of identified vulnerabilities, be able to clearly express the risk posed by these issues, and be able to evaluate the merits of proposed solutions. You will have a good understanding of security risk and be able to prioritize work accordingly. While this role requires technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products. You will advocate for security best practices across your interactions with your colleagues.

Minimum Qualifications

• Technical background in information security or a related field, with significant knowledge of Linux security concepts.
• Significant experience in automating security processes using Go, Python, Bash, or IaC tools such as Terraform to identify, validate and organize security vulnerabilities
• Demonstrable experience of leading security projects from design to delivery.
• Excellent organizational, communication, and stakeholder management skills.

Preferred Skills & Experience

• A background in network security
• Experience with integrating LLMs into security scanning pipelines
• Experience with configuring fuzzers and/or DAST scanning tools
• Familiarity with Kubernetes and cloud environments (e.g., AWS, Azure, GCP)

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you.