Offensive Security Engineer, Cisco Meraki

• Are self motivated with strong aim to innovate in penetration testing, red teaming, and vulnerability assessments
• Are excited to build automated testing proof of concepts, operations, and systems to streamline project phases
• Have a bachelor’s degree in Computer Science, Information Security, or 5+ years of related work experience
• Have 2+ yrs of proven experience in hardware security, embedded device penetration testing, or electrical engineering
• Demonstrated understanding of common standards and guides such as:
• OWASP Web Security Testing Guide (WSTG)
• OWASP Mobile Application Security Testing Guide (MASTG)
• OWASP IoT Security Testing Guide (ISTG)
• Penetration Testing Execution Standard (PTES)
• Strong communication skills, particularly written communication

Desirable

• As a member of Offensive Security, you will be a key member of a team that identifies, and helps fix vulnerabilities in our products, services, and enterprise to improve software quality within the Trust Assurance group
• Have dedicated time before each project to derive test cases from threat models, security testing guides, and vulnerability research
• Collaborate with project teams to capture key information such as feature capabilities and technology stacks that aid in tailoring threat scenarios contextually
• Be responsible for managing project operations ranging from presenting timely updates of achievements, identified risks, report writing of findings, and report readouts to project teams
• Expand on existing threat models and security testing methodologies to include emerging threat tactics and procedures
• Partner with Trust Assurance teams to improve lifecycle assurance patterns and practices as a key feedback loop function that reduces risk of incident events

• Application window is expected to close on 10/10/2024