Security Software Engineer - (Programing| Security standards | Security Tools | Microservices, 8+ Yrs - BLR)
Cisco
Bengaluru, Karnataka, India
Who we are Cisco is transforming the networking industry. To make this happen, we are heavily investing in team responsible for The Network. Intuitive. We are disrupting the industry by building a new networking platform that can learn, adapt, and secure itself at the speed of today’s businesses. This Digital Network Architecture platform automates network management and provides our customers with state-of-the-art analytics and insights. This team's innovations span artificial intelligence, machine learning, analytics, IoT, security, automation, and more. Who You Are You are a software engineer who believes in creating customer delight thru simple and easy to use solutions. The ideal candidate must enjoy working in a fast-paced dynamic environment with a “take-charge” / “can-do” attitude and is able to demonstrate flexibility and resiliency. Successful candidate must be self-sufficient and be able to work with minimal supervision. Work with geographically distributed teams across different time zones. What You'll Do Build high performant, highly scalable, complex and distributed systems – end to end Develop simple solutions to address complex problems. Contribute to a future-ready, high quality, and performant code base. Bring technical solutions to the leadership team, feedback on solutions recommended, new product ideas with the team through design review, pair programming, code review and tech talk. Ability to share technical solutions and product ideas with the broader team through design review, code review, proof-of-concepts and show and tell Participate in brainstorming sessions and contribute ideas to our technology, algorithms and products Who You'll Work With Work closely with development, test and with various cross technology teams to design development strategies and plans followed by designing & writing code reflecting the requirements and functionality of the product. Work with other functions such as Architects, Product owners/customers, Quality Engineering to help prioritize, define, andimplement features with the right quality. Responsibilities: Be part of a team of engineers involved in the development and testing of software for our next generation campus networking architecture. Work with security architects and product owners / customers to help prioritize and define security deliverables Operate in an Agile methodology with an eye toward robust and disciplined software security development. Contribute to functional specifications. Write and review security portions of product spec and help seek transparency where it doesn't exist. Strong ability and desire to learn new tools and technologies as required is an absolute must. Develop and improve automated vulnerability tests, package composition analysis, enforcement of security coding standards with CI/CD build eco system (e.g. Jenkins, dockers, Ansible, maven, gradle), programming languages and security tools (e.g. Rapid7, BurpSuite, Black duck, Static Analysis) Gap analysis and alignment of [DNAC apps and services] compliance with security standards (e.g. ISO, PII/GDPR, FIPS, DoD, NIST SP800, UCAPL), Cisco security baselines, customer RFPs, and vulnerability scan reports. Familiarity with security protocols and algorithms. Conduct threat modeling, monitor and analyze vulnerability exposure of [DNAC apps and services]. Identify threats, defects and weakness in systems and design. Review and improve product security hardening and configuration documentations. Lead and automate the lifecycle management and refresh of third party software and certificates Minimum Qualifications: Experience with programming languages (e.g. Java, Python) to Develop and improve automated vulnerability tests, package composition analysis, Enforcement of security coding standards with CI/CD build eco system (e.g. Jenkins, dockers, Ansible, maven, gradle), programming languages and security tools (e.g. Rapid7, BurpSuite, Black duck, Static Analysis). Experience in conducting threat modeling, monitoring and analyzing vulnerability exposure, and Identifying threats in systems and design. Experience in or passion for microservices architecture and building a PaaS solution. Expert in use of standard SCM tools (Git) and CI/CD (Jenkins / Maven, etc) process. Strong motivation to innovate and improve customer and product experience. Strong problem solving and software development / troubleshooting skills. Ability to "think in code" and discuss ideas and algorithms is a must. Past experience working in an Agile / Scrum environment.
