Description
The Platform and Security team within Cisco’s AI Software and Platform Group designs and operates the infrastructure that powers Cisco’s AI powered offerings. You’ll partner across the AI Software and Platform group to set observability standards, deliver platform solutions, and raise the bar for what “great” looks like in production reliability.
Cisco is looking for a highly experienced security-focused DevSecOps practitioner to join a team and improve the security outcomes of its core AI products. As a lead engineer, you will bring your broad background in information security, DevOps practices, software development, and knowledge of compliance, and uplifting the organisation’s security posture.
Responsibilities:
- Drive a shift-left security strategy, ensuring security is integrated into every aspect of the software development lifecycle.
- Lead compliance efforts by working with internal and external audit teams, providing evidence, ensuring adherence to controls, and being a point person for security assurance.
- Perform security architecture reviews, lead threat modeling exercises, conduct adversarial red teaming on internal products, and ultimately help ship secure-by-design products.
- Create and maintain a risk register within the organisation, providing guidance on a risk-based approach to decision making for the leadership team.
Minimum Qualifications:
- Bachelor’s degree in Computer Science/Engineering (or related field) + 8 years of experience, Masters + 6 years of related experience, or PhD + 3 year of related experience.
- 2+ years of experience with AI Agents to perform security testing and evaluations against code and deployed systems.
- Experience in shift-left security, including integrating SAST/DAST into CI pipelines, with knowledge of Prisma Cloud, Wiz, or similar CNAPP tools required.
- Experience operationalizing vulnerability management, including setting and meeting severity-based SLAs/exception handling and reducing developer remediation friction.
- Experience securing runtime workloads and cloud infrastructure, including prior rollout of CADR/XDR/CWPP (or similar) plus experience in AWS/GCP/Azure and ability to secure Infrastructure as Code (Terraform, Helm).
Preferred Qualifications:
- CISSP or other ISC2 certification strongly preferred.
Benefits:
- Medical, dental and vision insurance
- 401(k) plan with a Cisco matching contribution
- Paid parental leave
- Short and long-term disability coverage
- Basic life insurance
- 10 paid holidays per full calendar year
- 1 paid day off for employee’s birthday
- Paid year-end holiday shutdown
- 4 paid days off for personal wellness
- 80 hours of sick time off provided on hire date and each January 1st thereafter
- Optional 10 paid days per full calendar year to volunteer