4 days ago
Base Salary
$139k - $204k/yr
Responsibilities
- Define and implement security guardrails across design, development, testing, and deployment phases of the Secure SDLC.
- Integrate and optimize SAST, DAST, SCA, and secrets-scanning controls within CI/CD pipelines.
- Lead threat modeling and secure design reviews for cloud-native and microservices-based applications.
- Drive container and Kubernetes security, including image hardening, vulnerability management, and runtime controls.
- Define and enforce API security standards covering authentication, authorization, rate limiting, and common API threats.
- Partner with engineering teams to triage, prioritize, and remediate security findings.
- Establish secure coding standards and guidance for OWASP Top 10 vulnerabilities.
- Improve software supply chain security through dependency management, artifact integrity, and build pipeline protections.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 6+ years of experience in cybersecurity or cloud security engineering.
- 3+ years of hands-on experience securing GCP, Azure, or AWS environments in production enterprise settings.
- Experience integrating security controls into CI/CD pipelines and Kubernetes environments, including container image hardening, vulnerability scanning, image signing, and runtime policy enforcement.
- Experience securing AI/ML workloads and Generative AI systems, including model, data, and inference endpoint protection.
- Cybersecurity background and operational experience preferred.
- Preferred certifications include ISC2 CISSP or CCSP and ISACA SSCP, CC, CISA, or CISM.
- Experience designing and managing IAM, encryption, and network security controls preferred.
Benefits
- Medical, dental, and vision insurance, a 401(k) with Cisco matching contributions, paid parental leave, disability coverage, and basic life insurance.
- Eligibility for Cisco restricted stock unit grants and annual bonuses under company policies.
- Paid holidays, floating holiday, birthday leave, year-end shutdown, personal wellness days, vacation or flexible time off, and sick time.
- Up to 10 paid volunteer days per year and additional paid time away for critical family or emergency issues.
- The application window is expected to close on October 29, 2026.
Tech Stack
Categories
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.