Senior Security Engineer

Who We Are

Cisco ThousandEyes is a Digital Experience Assurance platform that empowers organizations to deliver flawless digital experiences across every network – even the ones they don’t own. Powered by AI and an unmatched set of cloud, internet and enterprise network telemetry data, ThousandEyes enables IT teams to proactively detect, diagnose, and remediate issues – before they impact end- user experiences.

ThousandEyes is deeply integrated across the entire Cisco technology portfolio and beyond, helping customers deploy at scale while also delivering AI-powered assurance insights within Cisco’s leading Networking, Security, Collaboration, and Observability portfolios.

About the Role

The Application Window is expected to close on 6/7/25. However, the job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

ThousandEyes is seeking a talented and experienced Information Security Engineer to join our dynamic team. This role is critical in ensuring our compliance with FedRAMP requirements and maintaining our high standards of security. As an Information Security Engineer, you will play a pivotal role in interpreting compliance controls for engineering staff, building and implementing automation, and managing vulnerabilities, particularly in the Continuous Monitoring (ConMon) space. You will be responsible for driving projects from inception to to successful completion, ensuring our security measures are robust and up-to-date.

What You'll Do

1. Security Assessments:
• Conduct comprehensive security assessments of cloud environments leveraging NIST SP 800 series publications.
• Identify vulnerabilities and risks related to FedRAMP compliance.
• Provide detailed recommendations to mitigate risks leveraging the RMF and any other resources approved by the Federal Government/Agencies and best practices.
2. FedRAMP Compliance:
• Ensure all systems and services comply with FedRAMP requirements.
• Respond to technical inquiries and provide expert advice on FedRAMP compliance.
• Collaborate with external auditors during FedRAMP reviews and audits, providing precise and detailed responses.
3. Implementation of Security Controls:
• Implement and oversee technical and administrative security controls based on FedRAMP standards.
• Manage data encryption, authentication, authorization, access controls, and data protection leveraging FIPS 199, 140-2, and 140-3.
• Configure and maintain security tools and monitoring technologies to ensure continuous FedRAMP compliance.
4. Technical Advisory:
• Provide technical advice to development and operations teams on security best practices and FedRAMP compliance.
• Assist in troubleshooting technical issues related to security and compliance.
• Stay updated on the latest security threats, compliance trends, and changes in FedRAMP requirements.
5. Infrastructure as Code and Automation:
• Utilize tools like Kubernetes and Terraform to automate and manage security controls.
• Develop and maintain scripts to automate security processes and compliance checks.
• Ensure that infrastructure is secure by design and adheres to FedRAMP requirements.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience:
• Minimum of 5-7 years of experience in information security
• Proven experience in assessing and mitigating security risks in cloud and on-premises environments.
• Specific experience working with cloud technologies such as AWS, Google Cloud and/or Azure
• Technical Knowledge:
• Extensive knowledge of implementing security controls, including encryption, authentication, and access controls.
• Familiarity with security assessment and monitoring tools and technologies.
• Experience with Kubernetes and Terraform for infrastructure management.
• Proficiency in scripting languages (e.g., Python, Bash) for automation.
• Skills:
• Excellent verbal and written communication skills, with the ability to explain complex technical concepts to non-technical audiences.
• Ability to work independently and as part of a team, managing multiple tasks and projects simultaneously.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• Experience in automating security and compliance processes.
• Advanced scripting or programming skills for automation and security analysis.
• Additional relevant certifications, such as AWS Certified Secur