What You'll Do

You will provide advice and guidance on a wide variety of information security issues, concerns, and problems; and ensure that all development of applications and processes include adequate control measures. You will collaborate with various security partners across the broader CPX organization including governance and compliance personnel, developers, product owners, architects, and engineers pertaining to the design and build of Cisco cloud SaaS for FedRAMP and other security framework compliance initiatives.

You'll work within Security Engineering to help to ensure the review and implementation of application security components and tools ranging from Static to Dynamic scanning and processes to further mitigate any vulnerabilities. Integrating with the other functions across the team, you will guide and manage vulnerability mitigation, tracking and transparency across the greater CX organization. You will be working across a number of other teams within CX to support the success of our application security posture. You will drive improvements, measure consumable metrics and lead mitigation guidance with the appropriate teams.

Key Responsibilities

• Acts as the primary security point of contact for CPX FedRAMP projects and initiatives
• Provides authoritative information security risk control consultation with focus on FedRAMP defined controls
• Regularly collaborates with business leaders and product owners to evaluate security needs and impacts of security decisions on business processes as well as to communicate risks
• As part of project development, business application or process improvement, assists in the development of efficient and practical information security systems, procedures and controls
• Participates as a technical advisor for a variety of ad-hoc security projects
• Designs and implements an integrated risk management approach that applies operating controls to manage information security risks
• Implements information security policies, standards, and other requirements
• Guides staff in their efforts to develop applications maintaining secure coding practices and interpret the output of code analysis tools
• Addresses information security related issues and findings, ensuring that remedial actions as well as long term solutions are implemented to mitigate the underlying risks

Who You'll Work With

You'll be part of an innovative security team working with top-skilled cloud operations, application, and platform engineers within CPXE redefining the way that Cisco protects data stored in the cloud. Our team is passionate about security and applies savvy risk-based thinking to build the best outcomes for our customers.

Who You Are

You possess a Master's degree (BS/BA with additional experience will be considered), and at least 7 years of security experience, with a passion for information risk management and balancing controls with business needs. While you have deep technical expertise and FedRAMP experience, you thrive by applying this expertise to gain support and understanding from developers, product owners, and business leaders. You're adept at working with people of all backgrounds within a growing environment, and helping them be successful while improving security.

You have experience securing Cloud systems for federal customers and enjoy mentoring technical personnel. You understand FedRAMP information collection and reporting processes and bring deep knowledge of technical control mechanisms, authentication and authorization methodologies, DevSecOps, and industry security standards such as FedRAMP, NIST, ISO, and others. You have one or more security certifications, particularly those with a Cloud focus (CISSP, CCSP, AWS Cloud, Google Cloud Platform, etc.), and experience with reports development (status, metrics, and measures).

You Are Highly Capable Of

Effectively communicating complex technical ideas to peers, executives, and customers. You balance advanced technical knowledge and strategic business acuity when engaging with senior-level decision makers to convey business value of security. You're a leader who holds yourself and others accountable to deliver excellent results with little guidance. You view security as a service. You show full commitment to customer satisfaction, out-of-the-box thinking, analytical reasoning, and creative problem solving skills. You have a keen ability to switch from high-level thinking to realistic and pragmatic execution.