Senior Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Influence the design, review, and verification of security across Cisco's network-device portfolio.

• Develop threat models and evaluate device architectures and code to uncover fundamental weaknesses.

• Convert recurring weakness categories into secure patterns and reusable engineering controls.

• Validate security claims post-implementation using reproducible evidence.

• Illustrate effective measures and identify remaining security gaps.

• Work collaboratively with engineers from various functions, cultures, and regions.

• Leverage AI-enabled workflows to enhance security delivery.

• Assist in safeguarding Cisco routers, switches, access points, wireless LAN controllers, campus gateways, industrial IoT devices, cameras, and sensors.

⛳️ Requirements

• Bachelor’s degree in computer science, engineering, or a related technical field with 7 years of relevant experience; or a master’s degree with 4 years; or a PhD with 1 year.

• CSSLP certification preferred.

• Proven experience in delivering threat models, conducting security reviews, creating reusable controls or patterns, developing test cases, and producing reproducible evidence.

• Background in assessing and enhancing embedded or IoT network-device security throughout hardware, firmware, and the device lifecycle.

• Proficient in C/C++ code review.

• Experience in device security testing.

• Familiarity with security tooling in Python or a similar language.

• Knowledge of CWE hardware and software weakness hierarchies.

• Experience applying MITRE EMB3D, OWASP IoT guidelines, or similar device-security frameworks.

• Preferred: Experience collaborating across functions, cultures, and geographies in large matrix organizations.

• Preferred: Ability in systems thinking and prioritizing risk exposure.

• Preferred: Proficiency in agentic workflows integrating models, tools, and engineering data.

• Preferred: Understanding of static-analysis rules, secure APIs or wrappers, and CI/CD guardrails.

• Preferred: Experience in evaluating precision, coverage, and adoption across repositories or product families.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with Cisco matching contributions.

• Paid parental leave.

• Short- and long-term disability coverage.

• Basic life insurance.

• Cisco restricted stock unit grants may be available, contingent on continued employment and vesting periods.

• 10 paid holidays each full calendar year.

• 1 floating holiday for non-exempt employees.

• 1 paid day off for the employee’s birthday.

• Paid year-end holiday shutdown.

• 4 paid days off for personal wellness.

• 16 days of paid vacation per full calendar year for non-exempt employees.

• Flexible vacation time off program with no set limit for eligible exempt employees.

• 80 hours of sick time off provided on hire date and every January 1st thereafter.

• Up to 80 hours of unused sick time carried over between calendar years.

• Additional paid time off for critical or emergency family issues.

• Optional 10 paid volunteer days each full calendar year.

• Annual bonuses for non-sales roles, subject to Cisco’s policies.

• Opportunities for growth and development within Cisco’s global network.

• AI-enabled workflows and chances to learn, share ideas, and enhance security delivery.