AI DevSecOps Engineer
About The Position
Cisco’s Platform and Security team within the AI Software and Platform Group designs and operates infrastructure for AI offerings such as Cisco Cloud Control, AI Defense, and AI Canvas. The Observability Engineering group provides metrics, traces, and logs to support service observability and continuous monitoring. In partnership with teams across the AI Software and Platform group, this role helps establish observability standards and platform solutions and improve production reliability, including developing agentic observability that surfaces health insights more quickly and intelligently than traditional dashboards and alerts. As a security-focused lead engineer, you will improve the security outcomes of Cisco’s core AI products by applying expertise in information security, DevOps, software development, and compliance. You will embed security throughout the software development lifecycle, lead compliance and security assurance work, review architectures and threats, conduct adversarial testing, and guide leadership on risk-based decisions.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related field plus 7 years of experience; a master’s degree plus 4 years of related experience; or a PhD plus 1 year of related experience.
- At least 2 years of experience using AI agents to perform security testing and evaluations against code and deployed systems.
- Experience with shift-left security, including integrating SAST/DAST into CI pipelines.
- Knowledge of Prisma Cloud, Wiz, or similar CNAPP tools.
- Experience operationalizing vulnerability management, including setting and meeting severity-based SLAs, handling exceptions, and reducing friction in developer remediation.
- Experience securing runtime workloads and cloud infrastructure, including prior rollout of CADR/XDR/CWPP or similar capabilities.
- Experience with AWS, GCP, or Azure and ability to secure infrastructure as code using Terraform and Helm.
Nice To Haves
- CISSP or another ISC2 certification is strongly preferred.
Responsibilities
- Drive a shift-left security strategy, embedding security throughout every aspect of the SDLC.
- Lead compliance efforts with internal and external audit teams, provide evidence, ensure adherence to controls, and serve as a point person for security assurance.
- Perform security architecture reviews and lead threat modeling exercises.
- Conduct adversarial red teaming on internal products and help deliver secure-by-design products.
- Create and maintain an organizational risk register and advise leadership on risk-based decision-making.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k) plan with Cisco matching contribution
- Paid parental leave
- Short- and long-term disability coverage
- Basic life insurance
- Cisco restricted stock unit grants may be available, subject to eligibility and vesting conditions.
- Paid holidays and a floating holiday for non-exempt employees
- Paid birthday day off
- Paid year-end holiday shutdown
- Paid personal wellness days
- Vacation time or flexible vacation time off, depending on employee classification
- Paid sick time
- Additional paid time away may be requested for critical or emergency family issues.
- Optional paid volunteer days
- Annual bonuses may be available for non-sales roles, subject to Cisco policies.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
