3 days ago
Base Salary
$168k - $245k/yr
Responsibilities
- Create threat models and review device architectures and code to identify security weaknesses.
- Translate recurring weakness classes into secure patterns and reusable engineering controls.
- Test security claims after implementation using reproducible evidence and test cases.
- Assess and improve the security of embedded or IoT network devices across hardware, firmware, and the device lifecycle.
- Use CWE, MITRE EMB3D, OWASP IoT guidance, or comparable frameworks for threat modeling and remediation.
- Collaborate across engineering functions and geographies, communicate security findings and tradeoffs, mentor engineers, and coordinate delivery.
- Build or evaluate agentic workflows, static-analysis rules, secure APIs or wrappers, and CI/CD guardrails.
Requirements
- Bachelor’s degree in computer science, engineering, or a related technical field with 7 years of related experience; master’s degree with 4 years; or PhD with 1 year.
- Experience delivering threat models, security reviews, reusable controls or patterns, test cases, and reproducible verification evidence.
- Experience with embedded or IoT network-device security, including C/C++ code review, device security testing, and Python or comparable security tooling.
- Experience using CWE hardware and software weakness hierarchies and applying MITRE EMB3D, OWASP IoT guidance, or comparable device-security frameworks.
- Preferred: CSSLP certification.
- Preferred: experience collaborating in large matrix organizations, prioritizing security work through systems thinking and risk exposure, and guiding escalations.
- Preferred: experience building agentic workflows with evaluations, human review, protected inputs, and changing model capabilities.
- Preferred: experience developing static-analysis rules, secure APIs or wrappers, or CI/CD guardrails and evaluating their precision, coverage, and adoption.
Benefits
- Medical, dental, and vision insurance for eligible U.S. employees.
- 401(k) plan with Cisco matching contribution.
- Paid parental leave, short- and long-term disability coverage, and basic life insurance.
- Potential Cisco restricted stock unit grants subject to continued employment.
- Paid holidays, floating holiday, birthday leave, year-end shutdown, personal wellness days, vacation or flexible time off, and sick time.
- Additional paid time away for critical or emergency family matters and optional paid volunteer days.
- Annual bonuses may be available for non-sales roles.
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.