Information Security Engineer II (Full-Time) – United States

Cisco•Rtp, NC

About The Position

The Information Security Engineer II will join Cisco’s Cloud Assurance, Readiness & Compliance (CloudARC) team in the Security and Trust Organization. The team helps Cisco cloud platforms maintain strong security standards and protect customer data around the world. It works collaboratively with security engineers and compliance specialists, partnering with engineering, product, and legal teams to support cloud security. The role supports security assessments and external audits, including SOC 2 and ISO 27001, and helps engineering teams adopt Common Cloud Controls. It reviews cloud systems for security gaps, summarizes findings, supports remediation planning, and works with team leaders and audit partners to improve evidence gathering and automated reporting. This posting advertises potential opportunities; the exact role may not be open today. Applications are accepted until further notice.

Requirements

Master’s degree in Information Security, Cybersecurity, Computer Science, Computer Engineering, or a related STEM field; or a bachelor’s degree in one of these fields plus 1–2 years of experience or technical cybersecurity internships.
Hands-on academic, project, or professional experience with a major cloud platform such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
Foundational knowledge of cybersecurity and compliance frameworks, including SOC 2, ISO 27001/17/18, NIST Cybersecurity Framework, C5, or ENS.
Academic coursework or practical understanding of core security domains such as Secure SDLC, Identity & Access Management (IAM), Vulnerability Management, and access controls.
Experience evaluating system architectures, reviewing security controls, and preparing structured audit evidence.

Nice To Haves

Holding or working toward foundational security certifications such as CompTIA Security+, Cloud Practitioner, CCSK, or CISA in progress.
Basic familiarity with scripting languages or query tools such as Python, Bash, SQL, or REST APIs for data collection.
Experience participating in academic security labs, collegiate competitions, or risk assessment projects.
Strong verbal and written communication skills to explain technical security concepts clearly to cross-functional partners.
A curious, collaborative mindset and enthusiasm for learning and problem-solving in a team environment.

Responsibilities

Support security assessments and external audits, such as SOC 2 and ISO 27001.
Partner with engineering teams to guide adoption of Common Cloud Controls and establish consistent security practices.
Review cloud systems to identify security gaps, summarize findings, and help teams complete remediation plans.
Collaborate with team leaders and audit partners to streamline evidence gathering and improve automated reporting.

Benefits

Medical, dental, and vision insurance, subject to plan eligibility rules.
401(k) plan with a Cisco matching contribution.
Paid parental leave.
Short- and long-term disability coverage.
Basic life insurance.
Cisco restricted stock unit grants may be available, subject to eligibility and vesting conditions.
Paid holidays and a floating holiday for non-exempt employees.
Paid birthday day off, year-end holiday shutdown, and personal wellness days.
Paid vacation or flexible vacation time off, depending on employee classification.
Sick time off, with limited carryover of unused sick time.
Additional paid time away may be requested for critical or emergency family issues.
Optional paid volunteer days.
Annual bonuses may be available for non-sales roles, subject to Cisco policies.