Security Engineering Technical Leader (Remote)
About The Position
Cisco’s Product Security team helps protect products through vulnerability management, incident response, security reviews, regulatory compliance, and related work. This role makes security and regulatory readiness a practical part of product design, development, and operation. It translates evolving requirements—including the EU Cyber Resilience Act, data-sovereignty obligations, and AI regulations—into engineering controls and measurable outcomes. Working across engineering, cloud infrastructure, legal, privacy, and audit teams, the role strengthens product readiness, reduces regulatory risk, and builds confidence with customers and regulators while helping teams address complex challenges and continue innovating. The position is fully remote and may be performed from locations within the United States; it requires reliable internet access and the ability to work independently in a remote environment.
Requirements
- At least 7 years of experience in security engineering, product security, cloud security, compliance engineering, GRC engineering, or a related field.
- Experience managing complex, multi-faceted initiatives with multiple stakeholders to achieve value-added results.
- Experience performing security, regulatory, and control-gap assessments while supporting audits, assessments, certifications, or regulatory examinations.
- Experience converting regulatory or policy requirements into technical controls and measurable evidence.
- Working knowledge of one or more of the following: EU Cyber Resilience Act; EU AI Act; GDPR and data-governance principles; ISO 27001 / ISO 42001; SOC 2; NIST Cybersecurity Framework or NIST AI RMF.
Nice To Haves
- Experience with AI/ML security, model-risk management, algorithmic impact assessments, or responsible AI governance.
- Experience working with regulators, notified bodies, external auditors, or enterprise customer assurance teams.
- Relevant certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent experience.
- Software development or scripting experience in Python, Go, JavaScript, or similar languages.
- Ability to work independently across highly technical and cross-functional teams.
Responsibilities
- Lead Cyber Resilience Act readiness assessments and translate regulatory requirements into technical controls, implementation plans, and remediation priorities.
- Build and improve security and compliance engineering capabilities, including automated evidence collection, control-as-code, dashboards, and continuous monitoring.
- Assess sovereign cloud designs, AI capabilities, data flows, and third-party dependencies for security, privacy, and regulatory risks.
- Support audits and risk reporting.
- Help engineers establish sustainable security and compliance practices.
Benefits
- Medical, dental, and vision insurance
- 401(k) plan with Cisco matching contribution
- Paid parental leave
- Short- and long-term disability coverage
- Basic life insurance
- Cisco restricted stock unit grants may be available, subject to eligibility and continued employment
- 10 paid holidays per full calendar year
- Floating holiday for non-exempt employees
- Paid day off for employee’s birthday
- Paid year-end holiday shutdown
- Four paid personal-wellness days
- Paid vacation or flexible vacation time off, depending on employee classification and eligibility
- 80 hours of sick time off provided on hire and each January 1, with up to 80 unused hours carried forward
- Additional paid time away may be requested for critical or emergency family issues
- Optional 10 paid volunteer days per full calendar year
- Annual bonuses for non-sales roles, subject to Cisco policies
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
