Senior Security Engineer, SDLC & Vulnerability Management

Cisco Systems; Kraków; On-site; PLN 150,000 - 230,000; Full time

Job summary

Cisco is seeking a security engineering professional to ensure industry-leading security practices across the software development lifecycle. You will build and deploy tools to detect vulnerabilities in Cisco software and tailor those tools to focus on the most impactful signals.

You will triage findings from SAST/DAST scanners, cloud security, external reports, and pentests, while improving security processes with measurable metrics.

Qualifications

• Technical background in information security with Linux security concepts.
• Experience automating security processes using Go, Python, Bash, or Terraform.
• Experience leading security projects from design to delivery.
• Excellent organizational, communication, and stakeholder management skills.

Responsibilities

• Ensure Isovalent applies security practices across the SDLC.
• Build and deploy tools to detect vulnerabilities and tune for impactful signals.
• Triage findings from SAST/DAST scanners, cloud security scanners, external reports, and pentests.
• Improve security processes with measurable metrics and ownership.
• Collaborate with development, release, and other security teams to address vulnerabilities promptly.

Skills

Linux security concepts

Security automation

IaC with Terraform

Security project leadership

Stakeholder management

Kubernetes

Cloud environments (AWS, Azure, GCP)

DAST / fuzzing tools

LLMs in security pipelines

Tools

Kubernetes

Cloud environments (AWS, Azure, GCP)

DAST / fuzzing tools

LLMs in security pipelines

Job description

Cisco is seeking a security engineering professional to ensure industry-leading security practices across the software development lifecycle. You will build and deploy tools to detect vulnerabilities in Cisco software and tailor those tools to focus on the most impactful signals.

You will triage findings from SAST/DAST scanners, cloud security, external reports, and pentests, while improving security processes with measurable metrics.