Software Security Engineer

Cisco•Research Triangle Park, NC

3d•$128,600 - $184,900

About The Position

Cisco is hiring a Software Security Engineer for its Supply Chain & Legal IT Security team. The role focuses on securing and delivering next-generation software capabilities using modern technologies and processes, including AI-driven tools. The engineer will contribute hands-on coding, debugging, and peer reviews while working with engineers, architects, business partners, product owners, and global delivery teams in an Agile Scrum environment. The position combines software development with application, infrastructure, cloud, and AI security. Work includes assessing and remediating vulnerabilities; applying security practices across applications, AI platforms and agents, infrastructure as code, cloud services, and networks; automating security checks in CI/CD pipelines; and developing secure AI agents and integrations. The role also contributes to project releases, supports and mentors junior colleagues, and helps maintain a secure end-to-end Orchestrator system.

Requirements

Bachelor's degree in Computer Science, Engineering, or a related field.
At least 5 years of experience as a SOC Analyst, Detection Engineer, Security Engineer, Threat Intelligence Analyst, or in an adjacent IT field.
At least 5 years of experience with full-stack development, design, and technical leadership of application development.
Strong understanding of AI/ML concepts and experience implementing AI techniques and MCP tools in practical applications, together with security proficiency.
Proficiency in DevSecOps principles, application security, and application security testing.
Experience with the MEAN stack, API security, and application integration.
Experience developing microservices using one or more of Angular, GoLang, Python, Node JS, Java, Java/TypeScript, and RESTful services.

Nice To Haves

Good understanding of Agile and DevSecOps practices and toolsets.
Proficiency with CI/CD tools, cloud security services, and infrastructure-as-code tools; knowledge of secure coding, scripting, and automation.
Proficiency in SQL and PL/SQL, and extensive hands-on experience with relational, in-memory, and NoSQL databases, including Oracle, Snowflake, and Mongo.
Positive, self-starting attitude and strong communication and time-management skills.
Ability to work independently, seek guidance when needed, determine an effective approach to work, and serve as a resource for less-experienced colleagues.
Good understanding of the MITRE ATT&CK framework.
Professional understanding of HTTP data interchange and operations, TCP ports, and anomalous-action logging.
Working knowledge of HTTP interception and forwarding, proxies, and mutating or poisoning data payloads.
Penetration testing experience and familiarity with tools such as Caido and Burp Suite.
Familiarity with Oracle Cloud, AWS, and Azure.
Experience with React, Angular, Node, Java, Java/TypeScript, RPA technologies, Oracle, Mongo, or Snowflake.
Experience with test automation strategies and tools such as UIPath, Playwright, or Fluent.
Advanced prompt engineering skills.
Certifications in Java, databases, cloud, AWS, or AI/ML.

Responsibilities

Work with engineers and architects on software design, development, and application builds in a Scrum Agile environment.
Deliver AI-native full-stack user stories as part of Agile Scrum team work.
Conduct security assessments, scans, and audits to identify and mitigate application and infrastructure vulnerabilities.
Perform lightweight application and infrastructure penetration testing.
Implement and enforce security best practices for applications, AI platforms and agents, infrastructure as code, cloud services, and network architectures.
Conduct AI red-team testing and prompt stress testing; validate secure MCP/A2A agents and define Policy Based Access Controls.
Integrate security tools and checks into CI/CD pipelines and AI tools to automate build, test, and deployment processes.
Develop and debug code, address security issues, review code, suggest improvements, and solve systemic problems across codebases and technology stacks.
Collaborate with engineers, subject matter experts, vendors, and architects to build and peer review applications, manage skills libraries, and align with secure architectural direction.
Work with the Scrum master, Product owner, and global delivery teams on project releases and sprint work.
Fix security vulnerabilities and maintain application security.
Mentor and provide technical support to junior colleagues.
Design, develop, and optimize in-app and role-based AI agents with secure, scalable semantic layers, multi-agent protocols, and agent training features.
Collaborate across functions to integrate agents with external tools and services and contribute to an integration framework.
Collaborate with developers and operations teams to foster shared security responsibility.
Monitor for security threats, respond to and mitigate security incidents, and perform post-mortem and root-cause analysis.
Develop and enforce security policies and procedures and ensure compliance with regulations.

Benefits

Medical insurance
Dental insurance
Vision insurance
401(k) plan with Cisco matching contribution
Paid parental leave
Short- and long-term disability coverage
Basic life insurance
Paid holidays
Floating holiday for non-exempt employees
Paid birthday day off
Paid year-end holiday shutdown
Personal wellness days
Paid vacation or flexible vacation time off, depending on employee classification
Paid sick time
Additional paid time away may be requested for critical or emergency family issues
Optional paid volunteer days
Annual bonuses for eligible non-sales roles
Potential grants of Cisco restricted stock units