Software Security Engineer

Meet the Team

Join our diverse and inclusive Supply Chain team and be a part of one of the top Supply Chains in the world!

You'll have the incredible opportunity to join us as part of the Supply Chain & Legal IT Security team and play a key role in securing next-generation capabilities.

As a valued member of our team, you will be responsible for developing, securing, and delivering new capabilities using the latest technologies and processes, including AI-driven toolsets & processes. This includes actively coding, debugging and peer reviewing with the team. You'll also have the chance to work closely with our talented engineers and interact with our valued business partners, fostering an inclusive and respectful atmosphere.

Your specific responsibilities will include:

• Work with a team of engineers and architects responsible for the software design, development and building applications in Scrum Agile environment.

• Experience in delivering AI-native full-stack user-stories as part of agile scrum-team deliverables.

• Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure

• Perform light-weight application and infrastructure penetration testing

• Implement and enforce security best practices for applications, AI platforms / agents, infrastructure as code (IaC), cloud services, and network architectures.

• AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls.

• Automate security: Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process.

• Able to develop code, debug security issues, suggest improvements, review the code, provide solutions to systemic problems and be hands-on with various code base and technology stacks.

• Collaborating with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, manage Skills-libraries and align with secure architectural vision.

• Working closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work.

• Fix Security vulnerabilities and keep the application secure.

• Mentoring and providing technical support to junior colleagues.

• Design, develop, and optimize in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features.
• Collaborate cross-functionally to integrate agents with external tools and services, contributing to a robust integration framework.
  
  

Your Impact

As a member of the Cisco IT team, you will be a valuable part of the Supply Chain & Legal IT Security team. Our team is dedicated to securing the services, tools, platforms, and data that are essential for powering one of the top Supply Chains in the world.

At Cisco, we prioritize innovation and evolution to provide our Supply Chain team with a competitive advantage. This includes optimizing and automating business process systems, effectively utilizing cloud service providers, and developing cutting-edge in-house solutions.

You will collaborate with Product Owners, Other Architects, Tech Leads, Analysts, and global delivery teams within the Organization, as well as across various functions in Cisco.

You'll have the opportunity to join a dynamic, empowered, and collaborative team that values diverse perspectives and inclusive practices, all focused on building, supporting, and enhancing a seamless end-to-end Orchestrator system.

We believe that embracing diversity and fostering an inclusive environment are key to driving innovation and achieving success. Our team is committed to ensuring that everyone feels respected, valued, and empowered to contribute their unique ideas and experiences.

As an experienced security-minded software engineer, you possess a deep passion for application and infrastructure security and excel in developing solutions within agile environments. Your self-motivation and resourcefulness enable you to tackle complex security challenges and drive innovative solutions. You thrive in collaborative settings, working effectively with stakeholders to deliver growth and value across projects.

Your adaptability allows you to navigate ambiguity with ease, making you an asset in dynamic and evolving situations. You have a demonstrated ability to influence and inspire both within your team and across the organization, contributing to strategic initiatives and fostering a culture of continuous improvement.

You are adept to the AI-led transformationand inspired to evolve our solutions and ways-of-working with an AI-focused mindset.

Minimum Requirements:

• Bachelor's degree in Computer Science, Engineering or related field of study.
• 5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or adjacent IT field.
• 5+ years of experience with full-stack development, design, and technically leading application development.
• Strong understanding of AI/ML concepts and experience in implementing AI techniques & MCP tools in practical applications, as well as proficiency in security.
• Proficiency in DevSecOps principles, application security, application security testing.
• Experienced in MEAN stack, API security, and application integration.
• Experience in developing microservices using any of the following technologies: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services.

Preferred Requirements:

• Good understanding of Agile and DevSecOps practices and toolsets.
• Proficiency with CI/CD tools, cloud security services, and IaC tools. Knowledge of secure coding practices, scripting, and automation is also necessary.
• Proficiency in SQL, Pl/SQL and Extensive hands-on experience with relational, in-memory and NoSQL databases including Oracle, Snowflake and Mongo.
• Positive and self-starter attitude, with a strong communication and time management skillset.
• Works independently but seeks guidance from leaders when needed and determines the best approach to accomplish work. Acts as a resource for colleagues with less experience.

• Good understanding of MITRE ATT&CK framework.
• Collaborate across teams: Work with developers and operations teams to foster a culture of shared security responsibility.
• Incident response: Monitor for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences.
• Implement security policies: Develop and enforce security policies and procedures and ensure compliance with regulations.

• Professional understanding of HTTP data interchange and operations, TCP ports, anomalous action logging.

• Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads.

• Experience with Pentesting and tooling like Caido and Burp Suite.

• Familiarity with cloud services such as Oracle Cloud, AWS, and Azure.

• Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, Snowflake.

• Experience with test automation strategies and tools, such as UIPath, Playwright or Fluent.

• Advanced prompt engineering skills.

• Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued.

At Cisco, we're revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond. We've been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you'll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.

Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process.

U.S. employees are offered benefits, subject to Cisco's plan eligibility rules, which include medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. Please see the Cisco careers site to discover more benefits and perks. Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time.

U.S. employees are eligible for paid time away as described below, subject to Cisco's policies:

• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees

• 1 paid day off for employee's birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco

• Non-exempt employees** receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees

• Exempt employees participate in Cisco's flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations)

• 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours ofunused sick timecarried forwardfrom one calendar yearto the next

• Additional paid time away may be requested to deal with critical or emergency issues for family members

• Optional 10 paid days per full calendar year to volunteer

For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco's policies.

Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components, subject to the applicable Cisco plan. For quota-based incentive pay, Cisco typically pays as follows:

• .75% of incentive target for each 1% of revenue attainment up to 50% of quota;

• 1.5% of incentive target for each 1% of attainment between 50% and 75%;

• 1% of incentive target for each 1% of attainment between 75% and 100%; and

• Once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation.

For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay 0% up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid.

The applicable full salary ranges for this position, by specific state, are listed below:

New York City Metro Area:

Non-Metro New York state & Washington state:

* For quota-based sales roles on Cisco's sales plan, the ranges provided in this posting include base pay and sales target incentive compensation combined.

** Employees in Illinois, whether exempt or non-exempt, will participate in a unique time off program to meet local requirements.