1 day ago
Base Salary
$152k - $222k/yr
Responsibilities
- Own the portfolio-wide view of security risk and translate threats, architectural changes, and security debt into leadership priorities.
- Review and approve secure designs, make architecture trade-off decisions, and apply security-by-design and security-by-default principles.
- Lead threat modeling across complex software systems, including AI- and LLM-enabled features.
- Interpret SAST, DAST, and SCA results and provide risk-based remediation guidance.
- Integrate security controls into CI/CD pipelines and cloud-native environments, including Kubernetes and containers.
- Coordinate security subject-matter experts in areas such as cryptography and identity and present prioritized unmitigated risks at release or delivery.
- Define and lead security metrics covering risk reduction, mean time to remediate, security debt, and developer adoption.
- Influence Product Management, Engineering, IT/Enterprise Operations, and Business Information Security Officer partners without direct authority.
Requirements
- Bachelor’s degree plus 8 years of related experience, master’s degree plus 6 years, PhD plus 3 years, or equivalent related work experience.
- Proven experience leading threat modeling and secure design or architecture reviews for complex software systems, including AI- and LLM-enabled features.
- Demonstrated experience interpreting SAST, DAST, and SCA results and converting findings into evidence-backed remediation guidance.
- Extensive experience integrating security controls into CI/CD pipelines and cloud-native environments, including Kubernetes and containers.
- Ability to influence engineering and product leadership and drive security outcomes across teams without direct authority.
- Preferred expertise in identity and access management, cryptography, data security, application security, or software supply chain security.
- Preferred experience with SBOM generation, artifact signing, SLSA-aligned practices, internal IT or platform engineering partnerships, security metrics, vulnerability research, and industry-standard security frameworks.
- Relevant certifications such as CISSP, CSSLP, CCSP, or GIAC are preferred.
Benefits
- Remote work anywhere in the contiguous United States.
- Medical, dental, and vision insurance, 401(k) with company matching, paid parental leave, disability coverage, and basic life insurance, subject to eligibility.
- Potential Cisco restricted stock unit grants and annual bonuses for non-sales roles.
- Paid holidays, floating holiday, birthday leave, year-end shutdown, personal wellness days, vacation or flexible time off depending on classification, and sick time.
- Up to 10 paid volunteer days per year and additional paid time away for critical family or emergency issues.
Tech Stack
Categories
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.