17 hours ago
Base Salary
$152k - $222k/yr
Responsibilities
- Manage the intake of software security requirements improvement requests and coordinate scheduled requirements releases.
- Drive Secure SDLC governance and transformation initiatives across subject matter experts, developers, and product operations.
- Transform static software security policies into actionable, machine-readable requirements for engineering workflows.
- Author and refine security requirements from a developer’s perspective.
- Design, build, and maintain agentic workflows supporting security requirements governance, verification, and reporting.
- Support threat modeling, build environment security, automated evidence collection, and quantitative risk calculation initiatives.
- Establish durable, repeatable requirements intake and release management processes that scale across the organization.
Requirements
- Bachelor’s degree plus 8 years of related experience, master’s degree plus 6 years, PhD plus 3 years, or equivalent related work experience.
- Extensive experience defining and governing software security requirements and managing Secure SDLC releases.
- Proven experience in security requirements engineering and transforming static policies into machine-readable engineering requirements.
- Demonstrated ability to lead cross-functional transformation initiatives involving subject matter experts, developers, and product operations.
- Strong background in DevSecOps and build environment security strategy, including agentic workflow and automation design.
- Advanced knowledge of threat modeling and secure architecture and design principles.
- Experience with SDLC governance, requirements development and maintenance, automated evidence collection, and quantitative risk calculations.
- Strong communication skills and the ability to build consensus and explain complex security topics clearly.
Benefits
- Remote position open to candidates anywhere in the U.S.; Raleigh/Durham, NC, and Austin, TX, are preferred locations.
- Benefits include medical, dental, and vision insurance; a 401(k) plan with Cisco matching contributions; paid parental leave; disability coverage; and basic life insurance.
- Employees may be eligible for Cisco restricted stock unit grants and annual bonuses for non-sales roles.
- Paid time off includes holidays, birthday and wellness days, vacation or flexible vacation depending on classification, sick time, family emergency leave, and optional paid volunteer days.
Categories
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.