Security Engineer

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Influence the design, assessment, and validation of security measures across Cisco's network-device portfolio.

• Develop threat models and analyze device architectures and code to pinpoint fundamental vulnerabilities.

• Convert recurring categories of weaknesses into secure patterns and reusable engineering controls.

• Validate security claims post-implementation using verifiable evidence.

• Determine effective measures and identify remaining security gaps.

• Collaborate with engineers from various functions, cultures, and regions.

• Leverage AI-driven workflows to enhance security delivery.

• Contribute to the protection of routers, switches, access points, wireless LAN controllers, campus gateways, industrial IoT devices, cameras, and sensors.

⛳️ Requirements

• A bachelor's degree in computer science, engineering, or a related technical discipline with 7 years of relevant experience; a master's degree with 4 years; or a PhD with 1 year.

• CSSLP certification is preferred.

• Proven experience in delivering threat models, conducting security reviews, and creating reusable controls or patterns, test cases, and reproducible evidence.

• Background in assessing and enhancing embedded or IoT network-device security throughout hardware, firmware, and the device lifecycle.

• Proficiency in C/C++ code review.

• Experience with device security testing.

• Familiarity with security tools in Python or a similar programming language.

• Knowledge of CWE hardware and software weakness classifications.

• Experience applying MITRE EMB3D, OWASP IoT guidelines, or similar device-security frameworks.

• Preferred: experience working in large matrix organizations, mentoring, and coordinated project delivery.

• Preferred: systems thinking and prioritization of risk exposure.

• Preferred: agentic workflows that integrate models, tools, and engineering data.

• Preferred: understanding of static-analysis rules, secure APIs or wrappers, and CI/CD guardrails.

• Preferred: evaluating precision, coverage, and adoption across repositories or product lines.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with a Cisco matching contribution.

• Paid parental leave.

• Short- and long-term disability coverage.

• Basic life insurance.

• Cisco restricted stock unit grants may be available.

• 10 paid holidays each full calendar year.

• 1 floating holiday for non-exempt employees.

• Paid birthday day off.

• Paid year-end holiday shutdown.

• 4 paid personal wellness days.

• 16 days of paid vacation each full calendar year for non-exempt employees.

• Flexible vacation time off program with no specific limit for eligible exempt employees.

• 80 hours of sick time off granted on hire date and each January 1st thereafter.

• Up to 80 hours of unused sick time carried forward annually.

• Additional paid time off for critical or emergency family matters.

• Optional 10 paid volunteer days each full calendar year.

• Annual bonuses for non-sales positions, subject to Cisco's policies.

• Performance-based incentive pay for sales-plan team members.

• Opportunities for growth and the chance to create meaningful solutions.

• Professional collaboration and learning opportunities.