Security Research Engineering Technical Leader

Job Description What You'll DoAs a team member of Cisco's Advanced Security Initiatives Group (ASIG), you will evaluate our global products and services to identify security vulnerabilities, weaknesses, and improvements. You will learn to adopt an attacker mentality using tools, techniques, and processes that emulate real-world adversaries. You will work with amazingly creative, innovative, and collaborative security researchers to develop evolving ethical hacking skills and networking product knowledge. You will partner with Cisco's industry-leading engineering teams to assess the latest system and application architectures, contribute to creative security solutions, and gain unparalleled access to and experience with the latest technologies. You will also have opportunities to research security topics independently or collaboratively to explore and develop tools and ideas as part of our "Free Friday" innovation and incubation process.Who You'll Work WithOur security team is dynamic, hardworking, fun, and high-energy, but the work is done in a very casual environment that strongly encourages a work/life balance. Not only will you work alongside a team of skilled security researchers with a diverse spectrum of talents and experience levels, but you will also be interacting with a variety of engineering teams across Cisco. Cisco ASIG cultivates an environment where every individual's input and experience is valued. We prioritize training sessions and a mentor program surrounding you with the resources you will need to succeed.Who You AreWould you enjoy finding security flaws in critical systems, modeling prototype attacks that malicious actors might take advantage of, and crafting mitigations to thwart motivated and inventive adversaries? If you have a passion for computer security, enjoy solving exciting problems, and relish working with emerging technologies, Cisco wants you! Global ISPs, Fortune 500 companies, and world governments all depend on Cisco for critical infrastructure, and we want to guarantee that we keep delivering highly secured solutions to meet their needs.Desired Experience 6+ years of security penetration testing experience, including areas like web applications, APIs, user interfaces, and embedded devices 6+ years of software engineering or reverse engineering experience with C, C++, or Python/Ruby, or a commonly used programming language, with experience in secure coding/development and code analysis for vulnerabilities 6+ years of technical leadership experience in security assessments Skilled in two or more of following areas: Strong understanding of operating system concepts in the areas of memory management, computer architecture, or binary analysis 6+ years of hands on Unix experience with a solid understanding of security hardening configurations and capabilities 6+ years of experience with applied crypto, through implementation or analysis of crypto algorithms 6+ years of experience with network protocols, through implementation or analysis 6+ years of experience as a DevOps engineer, with a focus on DevOps security OSCP or related industry certifications are a plus.Other Desired Skills (and/or skills you'll have a chance to develop) Applied architectural security Cryptographic algorithm design and review Operating system fundamentals and secure configuration Security of virtualization platforms and techniques Network protocol analysis and debugging Web protocols and API security Secure development practices Software vulnerability assessment, fuzzing, and code analysis Exploit development WHY CISCO SECURE#WeAreCisco, where each person is unique. We bring our talents to work as a team each day, helping power an inclusive future for all. Get to know us! We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU. Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do. We're proud to be the Best Security Company in 2021 with the Best Authentication Technology and the Best Small and Mid-Size Enterprises Security Solution in 2022 by SC Media. Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up! What else can you expect? An ongoing investment in your growth-that's why we offer many employee resource groups (called Inclusive Communities), mentorship programs, and hundreds of learning resources to consistently level up your skillset and explore your interests. Because when you succeed, we succeed! "Cisco Secure offers an environment that combines cutting-edge, mission-critical, technology with some of the brightest, most diverse set of people I've ever had the pleasure of working with." - Chief of Staff, Engineering Join Cisco Secure - Be You, With Us!#CiscoSecureEng23  Read More