Senior Security Engineer, Cisco Meraki

• Bachelor’s degree in Computer Science, Information Security, or 7+ years of related work experience
• Have 5+ years of experience in hardware security, embedded system security, authentication and security protocols, PKI, cryptography and cryptographic protocols
• Strong communication and collaboration skills to work effectively with cross-functional teams and influence product security roadmaps
• Familiarity with modern security analysis tools (static analysis, fuzzing, AI-assisted code analysis, etc), development lifecycle processes, and common security standards (NIST, CIS, ISO, etc)
• Have experience performing source code-enabled security assessments, root cause, and adjacency analysis in C/C++, Golang, Rust, and Ruby
• Deep understanding of networking protocols, security controls, secure network architectures and common attack vectors
• Comfortable with secure development lifecycle practices such as security requirements, architecture review, threat modeling, code review, SAST, DAST etc
• Are comfortable using source-level debuggers, hardware/JTAG debuggers, network protocol analyzers, or logic analyzers to diagnose problems at all layers of the system
• Ability to explain sophisticated security problems and provide expert advice on secure design

Desirable

• Build critical security features spanning our entire product portfolio ranging from secure storage, resilient device on-boarding, and embedded Linux security solutions
• Collaborate with product engineering teams to design, review, and develop solutions that provide customers with trustworthy products
• Collaborate with hardware engineers on trusted computing security features such as secure boot, cryptographic accelerators, and tamper protection features
• Contribute to security requirements and technical guidelines for new products and vendor engagements
• Conduct comprehensive security testing and audits of Meraki networking products using industry-leading tools and techniques, and partner with development teams to remediate vulnerabilities
• Provide guidance and training to internal teams and partners on security standards
• Triage incoming product security issues from public bug bounty program
• Influence security-by-design concepts for new and mature products