Software Security Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Software Security Lead securing Cisco’s enterprise IT and Operations platforms across applications, cloud, identity, data, and AI. Leading threat modeling, architecture reviews, risk remediation, and security metrics.
Responsibilities:
- Serve as the security authority for Cisco’s IT and Enterprise Operations portfolio
- Maintain a current, data-backed view of portfolio security posture
- Translate threat trends, architectural shifts, and security debt into actionable priorities
- Advise and influence Product Management, Engineering, IT/Enterprise Operations, and Business Information Security Officer partners
- Review and approve secure designs across the portfolio
- Apply security-by-design and security-by-default principles
- Lead portfolio-wide threat modeling and connect models to design decisions
- Integrate AI securely into in-scope platforms and apply Software Security AI frameworks
- Advocate for AI capabilities that strengthen security outcomes
- Coordinate security subject-matter experts in areas such as cryptography and identity
- Present prioritized unmitigated security risks and residual posture at release or delivery
- Define and lead security engineering metrics, including risk reduction, mean time to remediate, security debt, and developer adoption
Requirements:
- Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience
- 7+ years of experience in software/application security, secure software development, or security engineering, including a senior or lead role
- Proven experience leading threat modeling and secure design/architecture reviews for complex software systems, including AI- and LLM-enabled features
- Experience interpreting SAST, DAST, and SCA results
- Experience translating findings into risk-based, evidence-backed remediation guidance
- Experience with cloud-native applications and modern CI/CD pipelines, including containers and Kubernetes
- Ability to influence engineering and product leadership and drive security outcomes across teams without direct authority
- Preferred specialization in identity and access management, cryptography, data security, enterprise application security, or software supply chain security
- Preferred experience with SBOM generation, artifact signing, and SLSA-aligned practices
- Preferred experience partnering with internal IT, operations, or platform engineering teams
- Preferred experience defining and using security metrics
- Certifications such as CISSP, CSSLP, CCSP, or GIAC are preferred
Benefits:
- Medical, dental and vision insurance
- 401(k) plan with a Cisco matching contribution
- Paid parental leave
- Short- and long-term disability coverage
- Basic life insurance
- Cisco restricted stock unit grants may be available
- 10 paid holidays per full calendar year
- 1 floating holiday for non-exempt employees
- Paid birthday day off
- Paid year-end holiday shutdown
- 4 paid personal wellness days
- 16 days of paid vacation per full calendar year for non-exempt employees
- Flexible vacation time off program with no defined limit for eligible exempt employees
- 80 hours of sick time off provided on hire and each January 1st
- Up to 80 hours of unused sick time carried forward annually
- Additional paid time away for critical or emergency family issues
- Optional 10 paid volunteer days per year
- Annual bonuses for non-sales roles
- Cisco careers site offers additional benefits and perks
Similar Jobs
Cybersecurity Architect
Cybersecurity Architect leading RMF, risk mitigation, and ATO efforts for DoD Zero Trust systems. GDIT delivers technology and mission services to U.S. government, defense, and intelligence agencies.
Senior Security Agent / AI Red Team Engineer
AI red-team engineer attacking PGTEK agents and converting findings into durable controls. Supporting secure Federal and DoD systems through threat modeling, remediation, and authorization activities.
Staff Security Researcher
Staff Security Researcher conducting vulnerability research and penetration testing for GitLab’s AI-powered DevSecOps platform. Developing attack methodologies, tooling, and security improvements.
Software Security Lead
Cisco software security lead securing AI-enabled enterprise platforms and applications. Leading threat modeling, architecture reviews, risk remediation, and portfolio security metrics.
Principal Security Researcher
Principal Security Researcher securing GitLab’s AI-powered DevSecOps platform. Leading vulnerability research, AI attack analysis, penetration testing, and remediation across GitLab’s codebase.
Application Security Remediation Engineer
Application Security Remediation Engineer remediating Wiz findings across enterprise applications for Arctiq’s technology services clients. Securing code, dependencies, containers, and DevSecOps delivery pipelines.
Senior Engineer, Information Security Architect
Information Security Architect engineering secure platforms and enterprise designs for Lovesac, a fast-growing adaptable furniture company. Leading Zero Trust architecture, security tooling, integrations, and governance.
Senior Security Engineer – Identity and Access Management
Senior IAM Security Engineer designing automated identity controls for Providence, a comprehensive healthcare organization. Modernizing hybrid identity infrastructure toward Zero Trust and cloud security.
Cybersecurity Engineer
Cybersecurity Engineer managing endpoint, identity, cloud, and enterprise security for Accela’s cloud-based government software platform. Supporting vulnerability management, compliance controls, investigations, and security automation.
Cyber Security Engineer
Cyber Security Engineer securing Emprise Bank through vulnerability management, identity access, DLP, vendor reviews, and incident response. Providing tier 3 security support and leading IT Security projects.
VP of IT and Cybersecurity
VP leading IT and cybersecurity strategy, reliability, and risk for Tidal Financial Group’s ETF investment technology platform. Advising executives and managing teams, vendors, incidents, and compliance.
IT Security Specialist
IT Security Specialist protecting Fika’s rural infrastructure nonprofit systems from cyber threats. Securing networks, cloud environments, endpoints, and compliance operations across global program offices.
Senior Digital Forensics and Incident Response Engineer
Senior DFIR Engineer leading identity-theft investigations and automation for Humana, a U.S. healthcare and insurance company. Supporting enterprise cyber investigations, incident response, and forensic capability development.
Senior Offensive Security Engineer
Senior offensive security engineer testing First Advantage’s products, cloud infrastructure, networks, and people. Building adversary simulations and driving remediation to reduce enterprise risk.
Security Engineer
Security Engineer securing PIP Labs’ DATA Network infrastructure, cloud environment, endpoints, and internal systems. Automating security operations and protecting sensitive real-world data used for AI training.
Senior macOS Engineer – Workforce AI Security
Senior macOS Engineer owning native endpoint security agents for Check Point’s enterprise AI platform. Building TLS interception, proxy controls, and data-loss protections across managed Macs.
IT/OT Security Architect
IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.
Security Captain – Rotational
Security Captain supervising personnel and protective operations at NMS’s remote Alpine oil field. Managing incidents, emergency response, client coordination, and rotational camp operations.
Senior Security Engineer, Threat & Offensive Security
Senior Security Engineer strengthening offensive security and threat operations. Protecting Valon’s AI-native mortgage servicing platform for regulated finance.
Global Security Architect
Security Architect designing Microsoft 365, Azure, and hybrid security architectures for base-IT’s SME and enterprise customers. Leading security roadmaps, workshops, migrations, and technical standards.