Software Security Engineer

Application window closes: 10/22/2026

About the role

Join our diverse and inclusive Supply Chain team and be a part of one of the top Supply Chains in the world. You'll have the incredible opportunity to join us as part of the Supply Chain & Legal IT Security team and play a key role in securing next-generation capabilities. As a valued member of our team, you will be responsible for developing, securing, and delivering new capabilities using the latest technologies and processes, including AI-driven toolsets & processes. This includes actively coding, debugging and peer reviewing with the team. You'll also have the chance to work closely with our talented engineers and interact with our valued business partners, fostering an inclusive and respectful atmosphere.

As a member of the Cisco IT team, you will be a valuable part of the Supply Chain & Legal IT Security team. Our team is dedicated to securing the services, tools, platforms, and data that are essential for powering one of the top Supply Chains in the world. At Cisco, we prioritize innovation and evolution to provide our Supply Chain team with a competitive advantage. This includes optimizing and automating business process systems, effectively utilizing cloud service providers, and developing cutting-edge in-house solutions. You will collaborate with Product Owners, Other Architects, Tech Leads, Analysts, and global delivery teams within the Organization, as well as across various functions in Cisco. You'll have the opportunity to join a dynamic, empowered, and collaborative team that values diverse perspectives and inclusive practices, all focused on building, supporting, and enhancing a seamless end-to-end Orchestrator system.

Responsibilities

• Work with a team of engineers and architects responsible for the software design, development and building applications in Scrum Agile environment
• Experience in delivering AI-native full-stack user-stories as part of agile scrum-team deliverables
• Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure
• Perform light-weight application and infrastructure penetration testing
• Implement and enforce security best practices for applications, AI platforms / agents, infrastructure as code (IaC), cloud services, and network architectures
• AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls
• Automate security: Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process
• Able to develop code, debug security issues, suggest improvements, review the code, provide solutions to systemic problems and be hands-on with various code base and technology stacks
• Collaborating with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, manage Skills-libraries and align with secure architectural vision
• Working closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work
• Fix Security vulnerabilities and keep the application secure
• Mentoring and providing technical support to junior colleagues
• Design, develop, and optimize in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features
• Collaborate cross-functionally to integrate agents with external tools and services, contributing to a robust integration framework

Requirements

• Bachelor's degree in Computer Science, Engineering or related field of study
• 5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or adjacent IT field
• 5+ years of experience with full-stack development, design, and technically leading application development
• Strong understanding of AI/ML concepts and experience in implementing AI techniques & MCP tools in practical applications, as well as proficiency in security
• Proficiency in DevSecOps principles, application security, application security testing
• Experienced in MEAN stack, API security, and application integration
• Experience in developing microservices using any of the following technologies: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services

Preferred qualifications

• Good understanding of Agile and DevSecOps practices and toolsets
• Proficiency with CI/CD tools, cloud security services, and IaC tools
• Knowledge of secure coding practices, scripting, and automation
• Proficiency in SQL, Pl/SQL and extensive hands-on experience with relational, in-memory and NoSQL databases including Oracle, Snowflake and Mongo
• Positive and self-starter attitude, with strong communication and time management skillset
• Works independently but seeks guidance from leaders when needed and determines the best approach to accomplish work
• Acts as a resource for colleagues with less experience
• Good understanding of MITRE ATT&CK framework
• Collaborate across teams: Work with developers and operations teams to foster a culture of shared security responsibility
• Incident response: Monitor for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences
• Implement security policies: Develop and enforce security policies and procedures and ensure compliance with regulations
• Professional understanding of HTTP data interchange and operations, TCP ports, anomalous action logging
• Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads
• Experience with Pentesting and tooling like Caido and Burp Suite
• Familiarity with cloud services such as Oracle Cloud, AWS, and Azure
• Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, Snowflake
• Experience with test automation strategies and tools, such as UIPath, Playwright or Fluent
• Advanced prompt engineering skills
• Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued

Benefits

U.S. employees are offered benefits, subject to Cisco's plan eligibility rules, which include:

• Medical, dental and vision insurance
• 401(k) plan with a Cisco matching contribution
• Paid parental leave
• Short and long-term disability coverage
• Basic life insurance
• Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time

Paid time away (subject to Cisco's policies):

• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
• 1 paid day off for employee's birthday
• Paid year-end holiday shutdown
• 4 paid days off for personal wellness determined by Cisco
• Non-exempt employees receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees
• Exempt employees participate in Cisco's flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations)
• 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
• Additional paid time away may be requested to deal with critical or emergency issues for family members
• Optional 10 paid days per full calendar year to volunteer

For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco's policies.

Pay

The starting salary range posted for this position is $12