Who We Are As the leader in cloud-managed IT, Cisco Meraki connects passionate people to their mission by simplifying the digital workplace. Our impact is driven by the innovative, purposeful, and vibrant people who make up our inclusive community. When technology is intuitive, our customers can focus on what matters! About The team As a member of the Security Operations team, you will have a substantial impact on the security of millions of Cisco Meraki users all around the world. We are looking for people who are passionate about security and eager to learn the ropes of vulnerability management (reporting, triaging and driving remediation). About The Role The Vulnerability Management Engineer plays a critical role in ensuring the security of our systems by managing and mitigating vulnerabilities. Key responsibilities include reviewing vulnerability scanning reports, assessing severity, and triaging vulnerabilities, along with efficiently managing Jira tickets to facilitate timely remediation or mitigation. This role requires utilizing tools such as Qualys, JFrog Xray, and Wiz to conduct vulnerability detection and response, and implementing a risk-based prioritization method for effective management. Leading process optimization efforts by identifying gaps in the vulnerability management workflow and enhancing program efficiency is also essential. Collaboration with international engineering teams is necessary to provide guidance on mitigating and remediating vulnerabilities, identify and report automation bugs, and contribute to solutions that reduce manual workload in the vulnerability management lifecycle. The role involves investigating vulnerability alerts, assessing their impact, and calculating severity scores based on attack complexity. Additional duties include maintaining scanning tools, reviewing CVEs for potential risk exceptions, and guiding teams on security best practices and patch management standards. Flexibility to work across different time zones is crucial for effective global collaboration and system security. Minimum Qualifications * Have 5+ years of vulnerability management experience, triaging and remediating findings from a variety of scanning tools * In-depth knowledge of common Security vulnerabilities (OWASP Top 10, CWE Top 25) * Experience building out and/or maturing vulnerability management programs, increasing the scope of programs, and contributing to automated solutions for those programs. * Exposure to EU compliance programs (ENS, BSI C5, Etc.) and Security Framework/Standards (NIST SP800, CSF, etc.) * Demonstrated expertise in network security principles, including firewalls, intrusion detection/prevention systems, and VPN technologies * Experience in using container orchestration tools such as Docker and Kubernetes to secure containerized applications * Are familiar with risk management concepts and can confidently identify and accept risks within vulnerability management programs Bonus points for * Experience writing automation scripts in Python * Experience working in an agile environment * Consistent track record to ship in a dynamic environment * Have experience developing in a hybrid environment using AWS or other cloud providers * Experience using Jira and other Atlassian software At Cisco Meraki, we’re challenging the status quo with the power of diversity, inclusion, and collaboration. When we connect different perspectives, we can imagine new possibilities, inspire innovation, and release the full potential of our people. We’re building an employee experience that includes appreciation, belonging, growth, and purpose for everyone. Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records. Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.