Security Engineer

Job description

Meet the Team Develops and executes software and operational security controls, defences, and countermeasures to intercept and prevent security risks. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities. Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third-party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs. Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks, and leads or participates in security architecture and design review meetings. Your Impact The Senior Security Engineer will help build and operate security observability capabilities across SaaS applications, homegrown applications, and cloud environments, and endpoints. This role converts security requirements into scalable monitoring, identifies configuration drift and control failures, integrates telemetry from multiple security platforms, and automates remediation workflows. The engineer will work independently on complex initiatives and provide technical guidance to other team members while supporting the technical leads. Key Responsibilities· Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints. · Translate security requirements into measurable configuration baselines and monitoring controls. · Strong AI understanding: how to use AI and create agents to help automate processes and tasks ·Understand security architecture and where risks are presented in a security review · Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems. · Determine which telemetry can be centralised in our tools and design solutions for remaining coverage gaps. · Develop dashboards that provide application owners with a consolidated view of configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items. · Create and tune monitoring rules to improve detection accuracy and reduce false positives. · Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure. · Lead onboarding of critical and high-risk applications into the monitoring programme. · Partner with application owners to remediate findings and validate that risks have been resolved. · Support remediation campaigns and measure risk reduction across participating applications. · Escalate critical, high-risk, or overdue findings according to established security standards. · Partner with AI security teams, consulting teams, ID&R, identity, cloud security, software security, privacy, and other specialist teams. · Document architectures, data flows, monitoring coverage, control logic, operational procedures, and technical decisions. · Mentor less-experienced engineers and serve as a technical backup to the Observability Technical Lead. Required Qualifications· Strong experience in security engineering, security architecture, security observability, AI, application security, cloud security, vulnerability management, or security operations. · Experience integrating security platforms through APIs, connectors, webhooks, or event-driven workflows. · Hands-on experience with SIEM, SSPM, cloud security, AI, asset inventory, or workflow automation platforms. · Working knowledge of SaaS security configurations, cloud services, Kubernetes, identity controls, logging, vulnerabilities, and application architectures. · Ability to automate workflows using Python, APIs, Tines, or comparable technologies. ·Experience translating security requirements into technical monitoring and validation logic. · Strong troubleshooting, documentation, stakeholder management, and risk analysis skills. · Ability to independently lead complex technical work from discovery through production implementation. Preferred Qualifications· Experience with Axonius, Wiz, Splunk, Jira, ServiceNow, and/or Tines. · Experience building security dashboards and normalising data across multiple sources. · Knowledge of endpoint security and monitoring local AI models, agents, MCP usage, and AI-assisted development tools. · Experience with root-cause correlation, automated remediation validation, and configuration-drift monitoring. ·Familiarity with AI security risks and production AI monitoring. # WeAreCisco # WeAreCisco, where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all. Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company and many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best but also be their best. We understand our outstanding opportunity to bring communities together, and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organisations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer—80 hours each year—allows us to give back to causes we are passionate about, and nearly 86% do! Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us! Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you. Disclaimer To ensure that we hire the best talent in the right way, we follow a strict hiring process and recently, Cisco has been made aware of fraudulent recruiters claiming to be from the company. Please be advised that any communication from Cisco about careers will: be in direct response to an application you have submitted through the company career site begin with screening or an interview originate from a Cisco email address, and be conducted across email, phone, or WebEx Cisco will never make a job offer without conducting an interview process or ask you for money in any way. If you have been requested to apply for a role or have received an offer from a site other than https://careers.cisco.com or cisco.wd5.myworkday.com, do not provide any personal identifying information, including your Aadhaar or other personal identifying number, birth certificate, banking information, driver's license, or passport. If you are the target of a recrui