FedRAMP Information Security Analyst

at  Cisco ThousandEyes

WHO WE ARE

The name ThousandEyes was born from two big ideas: the power to see things not ordinarily possible and the ability to collect insights from a multitude of vantage points. As the world continues its digital transformation and relies more on cloud services and the Internet, the “network,” which is now both public and private, has become a black box our customers cannot see or understand.
Our Internet and cloud intelligence platform delivers the only collectively powered real-time view of the Internet and private networks, cloud, and SaaS platforms, helping enterprises and service providers identify problems before they impact revenue, damage brand reputation, or halt employee productivity.
In August 2020, Cisco Systems completed the acquisition of ThousandEyes, which now forms the ThousandEyes Business Unit within the Cisco Networking Business Group and is the Network Assurance solution for Cisco across the Cisco Networking Cloud and Cisco Security Cloud. ThousandEyes is also a foundational component of Cisco’s growing Full-Stack Observability ("FSO") business.

REQUIREMENTS

• The successful applicant must be eligible to work in FedRAMP Moderate or FedRAMP High environments and qualify as a U.S. Person. Some roles may necessitate U.S. citizenship on U.S. soil.
• Possess a minimum of 5 years of experience in Information Security or related domains.
• Demonstrate a proven track record in security policy, compliance, information security operations, or security consulting.
• Showcase hands-on experience in designing, supporting, advising, and assessing the implementation of security controls for a FedRAMP authorized system.
• Exhibit tangible experience collaborating with stakeholder teams to implement standards and procedures that deliver business value while meeting control requirements.
• Hold relevant industry certifications (GIAC, SSCP, CISA, CISSP).
  Cisco values the perspectives and skills that emerge from employees with diverse backgrounds. That’s why Cisco is expanding the boundaries of discovering top talent by not only focusing on candidates with educational degrees and experience but also placing more emphasis on unlocking potential. We believe that everyone has something to offer and that diverse teams are better equipped to solve problems, innovate, and create a positive impact.
  We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification. Research shows that people from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy. We urge you not to prematurely exclude yourself and to apply if you’re interested in this work.
  Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.

ABOUT THE ROLE

As a FedRAMP Information Security Analyst at ThousandEyes, you will hold a pivotal role in spearheading initiatives to ensure compliance with U.S. Government regulations and standards. Your responsibilities encompass providing expert guidance on the design, implementation, operations, management, and maintenance of the ThousandEyes product, specifically geared towards achieving FedRAMP compliance. You will meticulously verify compliance with system security requirements and oversee the internal and external assessment and audit lifecycle, concentrating on Information Assurance and Information Security pertaining to ThousandEyes Federal Programs activities.

RESPONSIBILITIES

• Spearhead security efforts for national government accreditations such as FedRAMP
• Manage ongoing relationships with key third-party entities such as the FedRAMP PMO, 3PAO, and the AO.
• Foster collaboration across security and engineering teams to architect, implement, and monitor security and compliance features.
• Support assessment, continuous monitoring, and reporting activities.
• Engage directly with customers, prospects, and stakeholders.