Software Security Engineer

Job description

Our TeamJoin our diverse and inclusive Supply Chain team and be a part of one of the top Supply Chains in the world! You'll have the incredible opportunity to join us as part of the Supply Chain & Legal IT Security team and play a key role in securing next-generation capabilities. As a valued member of our team, you will be responsible for developing, securing, and delivering new capabilities using the latest technologies and processes, including AI-driven toolsets & processes. This includes actively coding, debugging and peer reviewing with the team. You'll also have the chance to work closely with our talented engineers and interact with our valued business partners, fostering an inclusive and respectful atmosphere. Who you'll work withAs a member of the Cisco IT team, you will be a valuable part of the Supply Chain & Legal IT Security team. Our team is dedicated to securing the services, tools, platforms, and data that are important for powering one of the top supply chains in the world. At Cisco, we prioritise innovation and evolution to provide our Supply Chain team with a competitive advantage. This includes optimising and automating business process systems, effectively utilising cloud service providers, and developing pioneering in-house solutions. You will collaborate with Product Owners, Other Architects, Tech Leads, Analysts, and global delivery teams within the Organization, as well as across various functions in Cisco. You'll have the opportunity to join a dynamic, empowered, and collaborative team that values diverse perspectives and inclusive practices, all focused on building, supporting, and enhancing a seamless end-to-end Orchestrator system. We believe that adopting diversity and fostering an inclusive environment are key to driving innovation and achieving success. Our team is committed to ensuring that everyone feels respected, valued, and empowered to contribute their unique ideas and experiences. Who you areAs an experienced security-minded software engineer, you possess a deep passion for application and infrastructure security and excel in developing solutions within agile environments. Your self-motivation and resourcefulness enable you to address complex security challenges and drive innovative solutions. You thrive in collaborative settings, working effectively with stakeholders to deliver growth and value across projects. Your adaptability allows you to navigate ambiguity with ease, making you an asset in dynamic and evolving situations. You have a demonstrated ability to influence and inspire both within your team and across the organisation, contributing to strategic initiatives and fostering a culture of continuous improvement. You are adept at the AI-led transformation and inspired to evolve our solutions and ways of working with an AI-focused approach Your specific responsibilities will include:Work with a team of engineers and architects responsible for the software design, development and building applications in a Scrum Agile environment. Experience in delivering AI-native full-stack user stories as part of agile scrum-team work. Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure Perform lightweight application and infrastructure penetration testing Implement and carry out security best practices for applications, AI platforms/agents, infrastructure as code (IaC), cloud services, and network architectures. AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls. Automate security: Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process. Able to develop code, debug security issues, suggest improvements, review the code, provide solutions to systemic problems and be hands-on with various code bases and technology stacks. Collaborating with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, handle Skills-libraries and align with a secure architectural vision. Working closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work. Fix Security vulnerabilities and keep the application secure. Mentoring and providing technical support to junior colleagues. Design, develop, and optimise in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features. Collaborate cross-functionally to integrate agents with external tools and services, giving to a robust integration framework. Minimum requirements:5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or in an adjacent IT field. Strong understanding of AI/ML concepts and experience in implementing AI techniques & MCP tools in practical applications, as well as proficiency in security. Proficiency in DevSecOps principles, application security, and application security testing. Experienced in the MEAN stack, API security, and application integration. Good understanding of the MITRE ATT&CK framework. Collaborate across teams: Work with developers and operations teams to develop a culture of shared security responsibility. Incident response: Supervise for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences. Implement security policies: Develop and carry out security policies and procedures and ensure compliance with regulations. Experience in developing microservices using any of the following technologies: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services. Good understanding of Agile and DevSecOps practices and toolsets. Proficiency with CI/CD tools, cloud security services, and IaC tools. Knowledge of secure coding practices, scripting, and automation is also vital. Proficiency in SQL, PL/SQL and Extensive hands-on experience with relational, in-memory and NoSQL databases, including Oracle, Snowflake and Mongo. Positive and self-starter demeanor, with a strong communication and time management abilities. Works independently but seeks guidance from leaders when needed and resolves the best approach to accomplish work. Acts as a resource for colleagues with less experience. Preferred Requirements:Professional understanding of HTTP data interchange and operations, TCP ports, and anomalous action logging. Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads. Experience with Pentesting and tooling like Caido and Burp Suite. Familiarity with cloud services such as Oracle Cloud, AWS, and Azure. Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, and Snowflake. Experience with test automation strategies and tools, such as UiPath, Playwright or Fluent. Advanced prompt engineering skills. Over 5 years of experience with full-stack development, design, and technically leading application development. Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued. #WeAreCisco where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all. Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company and many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best but also be their best. We understand our outstanding opportunity to bring communities together, and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organisations, called Inclusive Communities, to connect, foster belonging, learn to be informed alli