Product Security Engineer

This is a fully remote position that can be performed from locations within the United States.

Join Cisco's Product Security team to help make security and regulatory readiness a practical part of how products are designed, built, and operated. You'll turn evolving requirements, including the EU Cyber Resilience Act, data-sovereignty obligations, and AI regulations, into clear engineering controls and measurable outcomes.

Responsibilities:

• Lead Cyber Resilience Act readiness assessments and translate regulatory requirements into technical controls, implementation plans, and remediation priorities.
• Build and improve security and compliance engineering capabilities, including automated evidence collection, control-as-code, dashboards, and continuous monitoring.
• Assess sovereign cloud designs, AI capabilities, data flows, and third-party dependencies for security, privacy, and regulatory risks.
• Support audits and risk reporting, and help engineers establish sustainable security and compliance practices.

Minimum Qualifications:

• 7+ years of experience in security engineering, product security, cloud security, compliance engineering, GRC engineering, or a related field.
• Experience managing complex, multi-faceted initiatives with multiple stakeholders to achieve value-added results.
• Experience performing security, regulatory, and control-gap assessments, while supporting audits, assessments, certifications, or regulatory examinations.
• Experience converting regulatory or policy requirements into technical controls and measurable evidence.
• Working knowledge of one or more of the following: EU Cyber Resilience Act, EU AI Act, GDPR and data-governance principles, ISO 27001 / ISO 42001, SOC 2, NIST Cybersecurity Framework or NIST AI RMF.

Preferred Qualifications:

• Experience with AI/ML security, model-risk management, algorithmic impact assessments, or responsible AI governance.
• Experience working with regulators, notified bodies, external auditors, or enterprise customer assurance teams.
• Relevant certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent experience.
• Software development or scripting experience in Python, Go, JavaScript, or similar languages.
• Ability to work independently across highly technical and cross-functional teams.

Benefits:

• Medical, dental and vision insurance
• 401(k) plan with a Cisco matching contribution
• Paid parental leave
• Short and long-term disability coverage
• Basic life insurance
• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
• 1 paid day off for employee's birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness
• Non-exempt employees receive 16 days of paid vacation time per full calendar year
• Exempt employees participate in Cisco's flexible vacation time off program
• 80 hours of sick time off provided on hire date and each January 1st thereafter
• Optional 10 paid days per full calendar year to volunteer