Security Engineer, Vulnerability Management

Cisco; Remote; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading networking solutions company is seeking a skilled Security Engineer to lead the vulnerability management program. This role involves managing vulnerabilities in products and cloud environments, with a focus on ensuring compliance with security standards. Candidates should have over 5 years of relevant experience, strong skills in vulnerability management tools, and excellent communication abilities. This position allows for collaboration with various teams to address vulnerabilities effectively.

Qualifikationen

• 5+ years in information security, software engineering, or related field.
• Experience with vulnerability management tools and processes.
• Technical aptitude essential; strong programming background not required.

Aufgaben

• Define and lead the vulnerability management program.
• Promptly triage and remediate findings of potential vulnerabilities.
• Ensure security compliance requirements are met.

Kenntnisse

Vulnerability management tools

Scripting skills (Python, Bash)

Organizational skills

Communication skills

Stakeholder management

Ausbildung

Technical background in information security, software engineering or related field

Jobbeschreibung

Security Engineer, Vulnerability Management - Isovalent

Europe, Remote

Your Impact

You will define and lead the vulnerability management program at Isovalent, managing the vulnerabilities discovered in our products and cloud environments through their entire lifecycle. You will identify and deploy the right tools to detect vulnerabilities in Isovalent software, and tune those tools to ensure that we are focusing on the most valuable signals. You will triage findings from a variety of sources, including SAST / DAST scanners, cloud security scanners, external security reports, and pentests. You will use automation to ensure that we can efficiently triage findings and communicate valid reports wherever possible. You will have a good technical understanding of the nature of identified vulnerabilities, and be able to clearly express the risk posed by such issues.

While this role will require technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products.

Your Responsibilities Will Include

• Ensuring that products meet Isovalent's and Cisco's minimum security standards for release.
• Ensuring that findings of potential vulnerabilities are promptly triaged and remediated if necessary.
• Ensure that security compliance requirements are met across our releases.
• Working closely with product teams to ensure that appropriate mitigations are identified for vulnerabilities, and that mitigations are delivered as planned.

Minimum Qualifications

• Technical background in information security, software engineering, or a related field, typically 5+ years
• Significant experience with vulnerability management tools and processes.
• Scripting or automation skills (Python, Bash, etc.); a strong programming background is not required, but technical aptitude is essential.
• Excellent organizational, communication, and stakeholder management skills.

Preferred Skills & Experience

• A background in networking.
• Familiarity with cloud environments (e.g., AWS, Azure, GCP) and their security alerting mechanisms.

Why Cisco?

At Cisco, we're revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We've been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you'll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.