Senior Product Security Engineer
3 days ago
About The team
As a member of the Device Trust Assurance team, you will have a substantial impact on the security of millions of Cisco devices all around the world. We are looking for people who are passionate about security and eager to learn the ropes of vulnerability management (reporting, triaging and driving remediation).
About The Role
The Vulnerability Management Engineer plays a critical role in ensuring the security of our systems by managing and mitigating vulnerabilities. Key responsibilities include reviewing vulnerability scanning reports, assessing severity, and triaging vulnerabilities, along with efficiently managing Jira tickets to facilitate timely remediation or mitigation. This role requires utilizing tools such as Vigiles, yocto CVE scanner to conduct vulnerability scanning and analysis, and implementing a risk-based prioritization method for effective management. Leading process optimization efforts by identifying gaps in the vulnerability management workflow and enhancing program efficiency is also essential.
Collaboration with international security organizations as well as engineering teams is necessary to provide guidance on mitigating and remediating vulnerabilities, identify and report automation bugs, and contribute to solutions that reduce manual workload in the vulnerability management lifecycle. The role involves investigating vulnerability alerts, assessing their impact, and calculating severity scores based on attack complexity. Additional duties include maintaining scanning tools, reviewing CVEs for potential risk exceptions, and guiding teams on security best practices and patch management standards. Flexibility to work across different time zones is crucial for effective global collaboration and system security focusing on vulnerability management across Cisco's core platforms including but not limited to
- IOS-XE network operating systems
- SD-WAN infrastructure and controllers
- Meraki cloud-managed devices
- IIoT/Industrial IoT solutions
Qualifications
- 7+ years in vulnerability management or network security with strong focus on Cisco technologies
- Experiences in Cisco IOS-XE architecture, including kernel components and security mechanisms
- In-depth knowledge of common Security vulnerabilities (OWASP Top 10, CWE Top 25)
- Proficiency with vulnerability scanning tools (Semgrep, blackduck, vigiles, yocto cve scanner) and firmware analysis
- Experience with SBOM (Software Bill of Materials) analysis
- Ability to trace through Linux kernel configuration systems (KCONFIG) and interpret Makefiles
- Strong C programming skills and understanding of conditional code compilation
- Experience with scripting languages (Python, Bash) and network analysis tools (Wireshark)
- Proven ability to collaborate effectively across global teams and multiple time zones
- Consistent track record to ship in a dynamic environment
- Experience using Jira and other Atlassian software
Bonus points
- Cisco security certifications (CCNA/CCNP Security) and cybersecurity credentials (CISSP, CEH) preferred
- Experience with industrial/OT security standards (IEC 62443, NIST Cybersecurity Framework)
- Bachelor's degree in Computer Science, IT, or related field
-
Senior Security Engineer
6 days ago
Bengaluru, Karnataka, India Skyhigh Security Full time US$ 1,25,000 - US$ 1,75,000 per yearJob Title:Senior Security EngineerAbout Skyhigh Security:Skyhigh Security is a dynamic, fast-paced, cloud company that is a leader in the security industry. Our mission is to protect the world's data, and because of this, we live and breathe security. We value learning at our core, underpinned by openness and transparency.Since 2011, organizations have...
-
Security Engineer II
1 week ago
Bengaluru, Karnataka, India Safe Security Full time ₹ 12,00,000 - ₹ 36,00,000 per yearAt SAFE Security, our mission is bold and ambitious: We Will Build CyberAGI — a super-specialized system of intelligence that autonomously predicts, detects, and remediates threats. This isn't just a vision—it's the future we're building every day, with the best minds in AI, cybersecurity, and risk. At SAFE, we empower individuals and teams with the...
-
Security Engineer II
1 week ago
Bengaluru, Karnataka, India Safe Security Full time ₹ 5,00,000 - ₹ 15,00,000 per yearAt SAFE Security, our mission is bold and ambitious: We Will Build CyberAGI — a super-specialized system of intelligence that autonomously predicts, detects, and remediates threats. This isn't just a vision—it's the future we're building every day, with the best minds in AI, cybersecurity, and risk. At SAFE, we empower individuals and teams with the...
-
Security Engineer II
1 week ago
Bengaluru, Karnataka, India Safe Security Full time ₹ 6,00,000 - ₹ 18,00,000 per yearAt SAFE Security, our mission is bold and ambitious:We Will Build CyberAGI— a super-specialized system of intelligence that autonomously predicts, detects, and remediates threats. This isn't just a vision—it's the future we're building every day, with the best minds in AI, cybersecurity, and risk. At SAFE, we empower individuals and teams with the...
-
Senior Product Security Engineer
3 weeks ago
Bengaluru, Karnataka, India slice Full timeAbout Us slice the way you bank slice's purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We've all felt how slow, confusing, and complicated banking can be. So, we're reimagining it. We're building every product from scratch to be fast, transparent, and feel good,...
-
Senior Product Security Engineer
4 weeks ago
Bengaluru, Karnataka, India slice Full timeAbout Usslice the way you bankslice's purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We've all felt how slow, confusing, and complicated banking can be. So, we're reimagining it. We're building every product from scratch to be fast, transparent, and feel good, because...
-
Senior Product Security Engineer
3 days ago
Bengaluru, Karnataka, India slice Full time ₹ 12,00,000 - ₹ 36,00,000 per yearAbout Usslice the way you bankslice's purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We've all felt how slow, confusing, and complicated banking can be. So, we're reimagining it. We're building every product from scratch to be fast, transparent, and feel good, because...
-
Senior product security engineer
1 day ago
Bengaluru, Karnataka, India Cloud Software Group Full time ₹ 12,00,000 - ₹ 36,00,000 per yearThe Senior product security engineer is responsible for leading and executing the Security Development Lifecycle (SDL) for Citrix On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness, as well as drive and execute SDL best practices and its integration with the CI/CD, Agile and Waterfall development...
-
Senior Product Security Engineer
4 weeks ago
Bengaluru, Karnataka, India Slice Full timeAbout Usslice the way you bankslice's purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money.We've all felt how slow, confusing, and complicated banking can be.So, we're reimagining it.We're building every product from scratch to be fast, transparent, and feel good, because we...
-
Senior Product Security Engineer
4 weeks ago
Bengaluru, Karnataka, India slice Full timeAbout Us slice the way you bank slice's purpose is to make the world better at using money and time, with a major focus on building the best consumer experience for your money. We've all felt how slow, confusing, and complicated banking can be. So, we're reimagining it. We're building every product from scratch to be fast, transparent, and feel good,...
