Pen Test Engagement Manager (IC )

Application window is expected to close by 04/10/2025.

Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

The successful applicant will provide ownership of and be performing work in FedRAMP or IL-5 type environments, and therefore, must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil.

Meet The Team

We are a centralized team that supports Cisco teams to ensure the technology we build is secure. We provide security services to Cisco and enjoy going deep in various security engineering areas. Your primary clients will be internal engineering teams. You will also partner with teams in Cisco to improve product security posture, support market access (e.g. SOC2, PCI) and respond to customer requests.

Our security team is dynamic, hardworking, fun, and high-energy, but the work is done in a very casual environment that strongly encourages a work/life balance. Not only will you work alongside a team of skilled security researchers with a diverse spectrum of talents and experience levels, but you will also be interacting with a variety of engineering teams across Cisco. Cisco ASIG cultivates an environment where every individual's input and experience is valued. We prioritize training sessions and a mentor program surrounding you with the resources you will need to succeed.

Your Impact

The Advanced Security Initiatives Group is seeking a Penetration Test Technical Engagement Manager to operate our penetration testing service. This internal client- facing role covers a broad range of activities focused on taking Cisco teams through third-party penetration tests. In this role, you'll get to use your program/project management skills and security knowledge to run the program and continually mature the process, drive penetration testing engagements, and manage third-party vendors and budgets. You will partner with vendor teams and collaborate with internal engineering/product teams. You will use what we learn from pen tests to drive broad security improvements across Cisco.

Would you enjoy working with development engineers, product and engineering managers, security vendors, be an enabler for finding security flaws in critical systems, modeling prototype attacks that malicious actors might take advantage of, and crafting mitigations to thwart motivated and inventive adversaries? If you have a passion for computer security, enjoy solving exciting problems, and relish working with emerging technologies, Cisco wants you! Global ISPs, Fortune 500 companies, and world governments all depend on Cisco for critical infrastructure, and we want to guarantee that we keep delivering highly secured solutions to meet their needs.

Minimum Qualifications:

• BS or MS degree in computer science, computer engineering, information systems, security and/or privacy engineering or related field of study with 5+ years of security engineering experience
• Experience operating a service (planning, prioritization, budgeting and/or vendor management)
• Experience with OWASP Top 10 and knowledge of cloud security vulnerabilities.
• Knowledge of secure development life cycle.

Preferred Qualifications:

• Strong communication, interpersonal, and documentation skills.
• Penetration Testing, Red Teaming, Bug Bounty hunting and/or other similar offensive security testing experience.
• Experience creating and running automation tools.
• Previous experience in or supporting consulting services.
• Compliance and attestation framework awareness.
• Familiarity with Microsoft PowerApp, SharePoint, PowerBI.
• Familiarity with Atlassian Jira.
• Familiarity with Cisco products, offers, and services.

#WeAreCisco

#WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection-we celebrate our employees' diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company, many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best, but be their best.

We understand our outstanding opportunity to bring communities together and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organizations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer-80 hours each year-allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!