Security Engineer (Remote)

Sundayy · United States · 1 mo ago

RemoteRemoteInformation TechnologyFull-time

About the Company

Join Cisco, a global leader in networking, cybersecurity, and digital transformation solutions. With a rich history spanning over four decades, Cisco is committed to revolutionizing how data and infrastructure connect and protect organizations in the era of artificial intelligence and beyond. Our innovative solutions empower businesses to operate securely, efficiently, and with greater visibility across their digital footprints. We foster a culture of fearless innovation, encouraging our teams to experiment, create, and impact the world on a large scale. With a worldwide network of experts and a collaborative environment, Cisco provides limitless opportunities for growth, learning, and making a meaningful difference in the technology landscape.

About the Role

We are seeking a highly skilled Application Security Engineer to join our Application Security team, a high-impact group dedicated to safeguarding our customer-facing products. In this role, you will lead advanced penetration testing engagements, serving as a critical line of defense for both on-premises and cloud-based application portfolios. Your primary responsibility will be to develop sophisticated attack plans to identify vulnerabilities, assess risks, and provide detailed remediation guidance to development teams. You will leverage cutting-edge AI-driven automation and build agentic workflows to scale security testing efforts, ensuring comprehensive coverage of complex system architectures. Your expertise will be instrumental in making informed, risk-based security decisions and fostering a proactive security culture. You will work closely with cross-functional teams, mentoring junior members and driving long-term security maturity initiatives. This position offers a unique opportunity to operate at the forefront of security innovation, utilizing autonomous agents and human judgment to outpace emerging threats and safeguard our global ecosystem.

Qualifications

Bachelor's degree with 7+ years of relevant experience, or Master’s degree with 4+ years, or PhD with 1+ years in application security or related fields
Proven experience in offensive security, including web applications, mobile applications, networks, and distributed systems
Deep technical understanding of common vulnerabilities, attack vectors, and remediation strategies
Hands-on experience working with public cloud platforms such as AWS and GCP
Proficiency in developing and maintaining custom security tooling using languages like Python or Bash
Active contributions to the security community through publications, CVEs, open-source projects, or bug bounty recognitions (preferred)
Experience with development and automation languages such as C++, JavaScript, Python, or Go (preferred)
Familiarity with large-scale data platforms like Splunk or similar (preferred)
Ability to build and nurture cross-functional relationships with engineering teams to enhance security maturity
Excellent communication skills with a track record of mentoring and providing constructive technical feedback

Responsibilities

Lead and execute advanced penetration testing engagements across various application environments, including web, mobile, and cloud
Design and implement sophisticated attack strategies to identify vulnerabilities and security gaps
Develop actionable remediation guidance and collaborate with development teams to improve product security
Build and operate agentic AI workflows to automate and scale security testing processes
Assess risks and contribute to key security decision-making processes to ensure products meet high security standards
Proactively stress-test our ecosystem to identify potential threats before they materialize
Mentor junior security team members and foster a culture of continuous security improvement
Participate in security community activities, staying updated on the latest threats and mitigation techniques
Collaborate with cross-functional teams to embed security best practices into the development lifecycle

Benefits