Security Research Engineer (Full Time) United States Full-time Job

Job Description What You'll Do As a team member of Cisco's Advanced Security Initiatives Group (ASIG), you will evaluate our global products and services to identify security vulnerabilities, weaknesses, and improvements. You will learn to adopt an attacker mentality using tools, techniques, and processes that emulate real-world adversaries. You will work with amazingly creative, innovative, and collaborative security researchers to develop evolving ethical hacking skills and networking product knowledge. You will partner with Cisco's industry-leading engineering teams to assess the latest system and application architectures, contribute to creative security solutions, and gain unparalleled access to and experience with the latest technologies. You will also have opportunities to research security topics independently or collaboratively to explore and develop tools and ideas as part of our "Free Friday" innovation and incubation process. Who You'll Work With Our security team is dynamic, hardworking, fun, and high-energy, but the work is done in a very casual environment that strongly encourages a work/life balance. Not only will you work alongside a team of skilled security researchers with a diverse spectrum of talents and experience levels, but you will also be interacting with a variety of engineering teams across Cisco. Cisco ASIG cultivates an environment where every individual's input and experience is valued. We prioritize training sessions and a mentor program surrounding you with the resources you will need to succeed. Who You Are Would you enjoy finding security flaws in critical systems, modeling prototype attacks that malicious actors might take advantage of, and crafting mitigations to thwart motivated and inventive adversaries? If you have a passion for computer security, enjoy solving exciting problems, and relish working with emerging technologies, Cisco wants you! Global ISPs, Fortune 500 companies, and world governments all depend on Cisco for critical infrastructure, and we want to guarantee that we keep delivering highly secured solutions to meet their needs. Desired Experience You have 2+ years of software engineering experience with C, C++, or Python/Ruby, or a commonly used programming language, with experience in secure coding/development and code analysis for vulnerabilities. Recent academic experience qualifies. Including but not limited to a graduate/upcoming graduate of a technical degree or certification program from a Technical Boot Camp, Apprenticeship, Community College or 4-Year University. Skilled in two or more of the following areas (recent academic experience qualifies): Strong understanding of operating system concepts in the areas of memory management, computer architecture, or binary analysis Unix experience with an intermediate understanding of security hardening configurations and capabilities Experience with applied crypto, through implementation or analysis of crypto algorithms Experience with network protocols through implementation or analysis Experience as a DevOps engineer, with a focus on DevOps security Security testing experience, including areas like web applications, APIs, user interfaces, and embedded devices OSCP or other industry certifications are a plus Other Desired Skills (but skills you'll have a chance to develop) Applied architectural security Cryptographic algorithm design and review Operating system fundamentals and secure configuration Security of virtualization platforms and techniques Network protocol analysis and debugging Web protocols and API security Secure development practices Software vulnerability assessment, fuzzing, and code analysis Reverse engineering Exploit development Job Requirements: Preferred sites: Knoxville, Tennessee; Austin, Texas; or Research Triangle Park, North Carolina. Willing to consider remote. US Citizenship is required due to the nature of the work this position will perform and the government customers with which the role will work. Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Why Cisco #WeAreCisco, where each person is unique, but we bring our talents to work as a team and make a difference powering an inclusive future for all. We embrace digital, and help our customers implement change in their digital businesses. Some may think we're "old" (36 years strong) and only about hardware, but we're also a software company. And a security company. We even invented an intuitive network that adapts, predicts, learns and protects. No other company can do what we do - you can't put us in a box! But "Digital Transformation" is an empty buzz phrase without a culture that allows for innovation, creativity, and yes, even failure (if you learn from it.) Day to day, we focus on the give and take. We give our best, give our egos a break, and give of ourselves (because giving back is built into our DNA.) We take accountability, bold steps, and take difference to heart. Because without diversity of thought and a dedication to equality for all, there is no moving forward. So, you have colorful hair? Don't care. Tattoos? Show off your ink. Like polka dots? That's cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us!   Read More