6 days ago
Base Salary
$216k - $281k/yr
Responsibilities
- Drive a shift-left security strategy and embed security throughout the software development lifecycle.
- Lead compliance efforts with internal and external audit teams, provide evidence, ensure control adherence, and serve as the security-assurance point person.
- Conduct security architecture reviews, threat-modeling exercises, and adversarial red teaming for internal products.
- Create and maintain an organizational risk register and guide leadership on risk-based decision-making.
- Operationalize vulnerability management through severity-based service-level agreements, exception handling, and reduced developer remediation friction.
- Secure runtime workloads and cloud infrastructure, including Infrastructure as Code and cloud security controls.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related field with 8 years of related experience; alternatively, a master’s degree with 6 years or a PhD with 3 years.
- At least 2 years of experience using AI agents for security testing and evaluations against code and deployed systems.
- Experience with shift-left security and integrating SAST/DAST into CI pipelines.
- Knowledge of Prisma Cloud, Wiz, or similar CNAPP tools.
- Experience operationalizing vulnerability management, including severity-based SLAs and exception handling.
- Experience securing runtime workloads and cloud infrastructure, including CADR, XDR, CWPP, or similar deployments.
- Experience with AWS, GCP, or Azure and securing Infrastructure as Code using Terraform and Helm.
- CISSP or another ISC2 certification is strongly preferred.
Benefits
- The listed starting salary range is $216,300.00 to $280,800.00, with location-specific ranges also provided.
- Benefits may include medical, dental, and vision insurance; a 401(k) with Cisco matching; paid parental leave; disability coverage; basic life insurance; and potential restricted stock units.
- Paid time off includes holidays, vacation or flexible vacation, sick time, wellness days, birthday and year-end holidays, family emergency leave, and optional volunteer days, subject to eligibility and Cisco policies.
- Non-sales employees may be eligible for annual bonuses.
- The application window is expected to close on December 30, 2026.
Tech Stack
Categories
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.