3 days ago
Base Salary
$149k - $282k/yr
Responsibilities
- Create threat models and review network-device architectures and code to identify security weaknesses.
- Develop reusable secure patterns, engineering controls, static-analysis rules, secure APIs or wrappers, and CI/CD guardrails.
- Test security claims and device behavior using reproducible test cases and evidence.
- Assess embedded and IoT device security across hardware, firmware, software, and the device lifecycle.
- Apply weakness hierarchies and device-security frameworks to identify root causes and guide remediation.
- Collaborate with engineers across functions and geographies, communicate security findings and tradeoffs, mentor others, and coordinate delivery.
- Build and evaluate agentic workflows integrating models, tools, and engineering data with human review and protected inputs.
Requirements
- Bachelor’s degree in computer science, engineering, or a related technical field with 7 years of related experience; alternatively, a master’s degree with 4 years or a PhD with 1 year.
- Experience delivering threat models, security reviews, reusable controls or patterns, test cases, and reproducible evidence.
- Experience improving embedded or IoT network-device security, including C/C++ code review, device security testing, and Python or comparable-language security tooling.
- Experience using CWE hardware and software weakness hierarchies and applying MITRE EMB3D, OWASP IoT guidance, or comparable frameworks.
- CSSLP certification is preferred.
- Preferred qualifications include experience in large matrix organizations, security prioritization and risk exposure, agentic workflows, static-analysis rules, secure APIs or wrappers, CI/CD guardrails, and evaluating precision, coverage, and adoption.
Benefits
- Remote position in the U.S.
- Starting salary range of $167,700.00 to $245,200.00, excluding incentive compensation, equity, and benefits.
- Medical, dental, and vision insurance; 401(k) with Cisco matching contribution; paid parental leave; disability coverage; and basic life insurance.
- Potential eligibility for Cisco restricted stock unit grants and annual bonuses for non-sales roles.
- Paid holidays, floating holiday, birthday day off, year-end shutdown, personal wellness days, vacation or flexible vacation, sick time, family emergency leave, and optional paid volunteer days.
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.