Software Security Engineer

Job description

The application window is expected to close on: 10/22/2026Meet the Team Join our diverse and inclusive Supply Chain team and be a part of one of the top Supply Chains in the world! You'll have the incredible opportunity to join us as part of the Supply Chain & Legal IT Security team and play a key role in securing next-generation capabilities. As a valued member of our team, you will be responsible for developing, securing, and delivering new capabilities using the latest technologies and processes, including AI-driven toolsets & processes. This includes actively coding, debugging and peer reviewing with the team.  You'll also have the chance to work closely with our talented engineers and interact with our valued business partners, fostering an inclusive and respectful atmosphere. Your specific responsibilities will include: Work with a team of engineers and architects responsible for the software design, development and building applications in Scrum Agile environment. Experience in delivering AI-native full-stack user-stories as part of agile scrum-team deliverables. Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure Perform light-weight application and infrastructure penetration testing Implement and enforce security best practices for applications, AI platforms / agents, infrastructure as code (IaC), cloud services, and network architectures. AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls. Automate security: Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process. Able to develop code, debug security issues, suggest improvements, review the code, provide solutions to systemic problems and be hands-on with various code base and technology stacks. Collaborating with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, manage Skills-libraries and align with secure architectural vision. Working closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work. Fix Security vulnerabilities and keep the application secure. Mentoring and providing technical support to junior colleagues. Design, develop, and optimize in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features. Collaborate cross-functionally to integrate agents with external tools and services, contributing to a robust integration framework. Your Impact As a member of the Cisco IT team, you will be a valuable part of the Supply Chain & Legal IT Security team. Our team is dedicated to securing the services, tools, platforms, and data that are essential for powering one of the top Supply Chains in the world. At Cisco, we prioritize innovation and evolution to provide our Supply Chain team with a competitive advantage. This includes optimizing and automating business process systems, effectively utilizing cloud service providers, and developing cutting-edge in-house solutions. You will collaborate with Product Owners, Other Architects, Tech Leads, Analysts, and global delivery teams within the Organization, as well as across various functions in Cisco. You'll have the opportunity to join a dynamic, empowered, and collaborative team that values diverse perspectives and inclusive practices, all focused on building, supporting, and enhancing a seamless end-to-end Orchestrator system. We believe that embracing diversity and fostering an inclusive environment are key to driving innovation and achieving success. Our team is committed to ensuring that everyone feels respected, valued, and empowered to contribute their unique ideas and experiences. As an experienced security-minded software engineer, you possess a deep passion for application and infrastructure security and excel in developing solutions within agile environments. Your self-motivation and resourcefulness enable you to tackle complex security challenges and drive innovative solutions. You thrive in collaborative settings, working effectively with stakeholders to deliver growth and value across projects. Your adaptability allows you to navigate ambiguity with ease, making you an asset in dynamic and evolving situations. You have a demonstrated ability to influence and inspire both within your team and across the organization, contributing to strategic initiatives and fostering a culture of continuous improvement. You are adept to the AI-led transformation and inspired to evolve our solutions and ways-of-working with an AI-focused mindset. Minimum Requirements: Bachelor's degree in Computer Science, Engineering or related field of study. 5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or adjacent IT field. 5+ years of experience with full-stack development, design, and technically leading application development. Strong understanding of AI/ML concepts and experience in implementing AI techniques & MCP tools in practical applications, as well as proficiency in security. Proficiency in DevSecOps principles, application security, application security testing. Experienced in MEAN stack, API security, and application integration. Experience in developing microservices using any of the following technologies: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services. Preferred Requirements: Good understanding of Agile and DevSecOps practices and toolsets. Proficiency with CI/CD tools, cloud security services, and IaC tools. Knowledge of secure coding practices, scripting, and automation is also necessary. Proficiency in SQL, Pl/SQL and Extensive hands-on experience with relational, in-memory and NoSQL databases including Oracle, Snowflake and Mongo. Positive and self-starter attitude, with a strong communication and time management skillset. Works independently but seeks guidance from leaders when needed and determines the best approach to accomplish work. Acts as a resource for colleagues with less experience. Good understanding of MITRE ATT&CK framework. Collaborate across teams: Work with developers and operations teams to foster a culture of shared security responsibility. Incident response: Monitor for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences. Implement security policies: Develop and enforce security policies and procedures and ensure compliance with regulations. Professional understanding of HTTP data interchange and operations, TCP ports, anomalous action logging. Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads. Experience with Pentesting and tooling like Caido and Burp Suite. Familiarity with cloud services such as Oracle Cloud, AWS, and Azure. Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, Snowflake. Experience with test automation strategies and tools, such as UIPath, Playwright or Fluent. Advanced prompt engineering skills. Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued. Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow an