Senior Software QA Engineer - Cisco
Austin, TX
About the Job
Application window is expected to close on 09/20/2024.
What you will do:
• This position is critically needed to support Product Security testing for Next Generation Firewall (NGFW). Participate in complete life cycle of features right from inception till it’s get delivered as part of release includes Reviews, test planning, and end-to-end security testing.
• Performs penetration testing on devices and features to exploit and compromise defined targets ranging from web applications to hardware.
• Identify and exploit vulnerabilities in web applications, cloud, OS, hardware, and databases, etc...
• Participate in Product Security team as a senior subject matter expert and tester.
• Write test plans and create and execute test cases.
• Document technical and security findings identified during testing and security assessments and provide security recommendations.
• Conduct vulnerability assessments, security audits, and risk assessments on complex systems.
• Evaluate devices and features for possible attack vectors to either the device itself or the user.
• Track bugs/vulnerabilities through development lifecycle to ensure resolve.
Minimum Qualifications:
• Typically requires BS / MS with Computer Science / Computer Networks 5+ years of related experience.
• 3+ years of web application penetration testing experience is a requirement. Technical knowledge of security engineering, computer and network security, authentication, and security protocols
• Experience in vulnerability identification and remediation is a requirement.
Preferred Qualifications:
• Deep understanding of security principles, policies, and industry best practices
• Experience with using open-source security tools, with strong understanding of cross-site scripting, SQL injection and other web related vulnerabilities and attacks
• Experience in evasion techniques.
• Experience using NMAP, Nessus, and other automated scanning tools.
• Good Hands-on experience in Python, Java Script and API based development knowledge is required.
• Good understanding of networking architecture such as Routing/Switching (OSPF / BGP, EIGRP, VLAN), IP, TCP/UDP, and application layers such as HTTP, SMTP, etc.
• Good understanding in security products & technologies like Firewall, NAT, IPS, and VPN
• Having Cisco Certification such as CISSP, CISA, CEH, CCNA/CCNP/CCIE (Routing / Security) is a plus.
• Experience in analyzing crash logs, stack trace, faults by utilizing basic debugging techniques.
• Excellent analytical, communication and technical skills
• Ability to deliver results in a short time and experience working in fast paced high growth tech companies.
Why Cisco?
We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU.
Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.
We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!
There are so many amazing reasons to join Cisco. Learn more [1] here!
References
Visible links
1. https://www.cisco.com/c/en/us/about/careers/we-are-cisco.html
Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.
Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.
What you will do:
• This position is critically needed to support Product Security testing for Next Generation Firewall (NGFW). Participate in complete life cycle of features right from inception till it’s get delivered as part of release includes Reviews, test planning, and end-to-end security testing.
• Performs penetration testing on devices and features to exploit and compromise defined targets ranging from web applications to hardware.
• Identify and exploit vulnerabilities in web applications, cloud, OS, hardware, and databases, etc...
• Participate in Product Security team as a senior subject matter expert and tester.
• Write test plans and create and execute test cases.
• Document technical and security findings identified during testing and security assessments and provide security recommendations.
• Conduct vulnerability assessments, security audits, and risk assessments on complex systems.
• Evaluate devices and features for possible attack vectors to either the device itself or the user.
• Track bugs/vulnerabilities through development lifecycle to ensure resolve.
Minimum Qualifications:
• Typically requires BS / MS with Computer Science / Computer Networks 5+ years of related experience.
• 3+ years of web application penetration testing experience is a requirement. Technical knowledge of security engineering, computer and network security, authentication, and security protocols
• Experience in vulnerability identification and remediation is a requirement.
Preferred Qualifications:
• Deep understanding of security principles, policies, and industry best practices
• Experience with using open-source security tools, with strong understanding of cross-site scripting, SQL injection and other web related vulnerabilities and attacks
• Experience in evasion techniques.
• Experience using NMAP, Nessus, and other automated scanning tools.
• Good Hands-on experience in Python, Java Script and API based development knowledge is required.
• Good understanding of networking architecture such as Routing/Switching (OSPF / BGP, EIGRP, VLAN), IP, TCP/UDP, and application layers such as HTTP, SMTP, etc.
• Good understanding in security products & technologies like Firewall, NAT, IPS, and VPN
• Having Cisco Certification such as CISSP, CISA, CEH, CCNA/CCNP/CCIE (Routing / Security) is a plus.
• Experience in analyzing crash logs, stack trace, faults by utilizing basic debugging techniques.
• Excellent analytical, communication and technical skills
• Ability to deliver results in a short time and experience working in fast paced high growth tech companies.
Why Cisco?
We're global, we're adaptable, we're diverse, and our security portfolio is as extensive as it is groundbreaking. Have you heard of Threat, Detection & Response, Zero Trust by Duo, Common Services Engineering, or Cloud & Network Security? Those are only a few of our product teams! The only thing we're missing is YOU.
Join an enterprise security leader with a start-up culture, committed to driving innovation and giving you the opportunity to make an impact. We #InnovateToWin and we know we're better together, that's why we're dedicated to inclusivity, collaboration, and diversity in everything we do.
We're proud to be the Best Small and Mid-Size Enterprises Security Solution Cisco Secure continues to grow and evolve year after year with 100% of Fortune 100 Companies using our products, and we're excited to see the new heights we'll reach with your passion for security, your customer focus, and your desire to change things up!
There are so many amazing reasons to join Cisco. Learn more [1] here!
References
Visible links
1. https://www.cisco.com/c/en/us/about/careers/we-are-cisco.html
Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.
Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.
Source : Cisco