Security Engineer

This is a fully remote position, open to applicants in Colorado, +2 more states.

📋 Description

• Lead complex penetration testing projects for both on-premises and cloud-based application portfolios

• Develop intricate attack strategies to detect vulnerabilities

• Offer comprehensive and actionable remediation recommendations to development teams

• Design and implement agentic AI workflows to enhance the scalability of security testing

• Expand testing coverage across intricate system architectures

• Make informed, risk-based security choices

• Advocate for a proactive security culture leveraging human insight and autonomous agents

• Work in tandem with development and engineering teams to elevate product security maturity

⛳️ Requirements

• Bachelor’s degree with 7 years of relevant experience, Master’s with 4 years, or PhD with 1 year in application-level penetration testing

• Practical offensive security experience encompassing web applications, mobile applications, networks, and distributed systems

• Strong technical knowledge of prevalent vulnerabilities, attack methods, and remediation techniques

• Familiarity with public cloud platforms, particularly AWS and GCP

• Proficiency in developing and maintaining custom tools using Python or Bash

• Preferred: active involvement in the security community, including research publications, CVEs, open-source contributions, or bug-bounty acknowledgments

• Preferred: experience with C++, Javascript, Python, or Go

• Preferred: experience using Splunk products or other similar large-scale data platforms

• Preferred: proven ability to build cross-functional relationships with engineering teams

• Preferred: experience in communication, mentoring, and providing constructive technical feedback

🏝️ Benefits

• Medical, dental and vision insurance

• 401(k) plan with a Cisco matching contribution

• Paid parental leave

• Short- and long-term disability coverage

• Basic life insurance

• Cisco restricted stock unit grants may be available, subject to eligibility

• 10 paid holidays per full calendar year

• 1 floating holiday for non-exempt employees

• 1 paid day off for employee’s birthday

• Paid year-end holiday shutdown

• 4 paid days off for personal wellness

• 16 days of paid vacation per full calendar year for non-exempt employees

• Flexible vacation time off program with no defined limit for eligible exempt employees

• 80 hours of sick time off provided on hire date and each January 1st thereafter

• Up to 80 hours of unused sick time carried forward annually

• Additional paid time away for critical or emergency family issues

• Optional 10 paid volunteer days per full calendar year

• Annual bonuses for non-sales roles, subject to Cisco policies

• Performance-based incentive pay for employees on sales plans