Requirements

Bachelor’s degree with 5+ years of hands-on experience in security and compliance automation, hardening, vulnerability remediation, secure delivery improvements, or related DevSecOps capabilities
3+ years’ experience conducting security reviews, architecture reviews, threat or risk assessments, and translating findings into practical guidance and remediation plans (e.g., for SOC2, ISO, or other certification frameworks)
Experience with corporate security mandates, secure development lifecycle requirements, product security standards, compliance requirements, or security audit processes
Knowledge of security frameworks and compliance audits such as SOC 2, ISO 27001, or similar frameworks, and privacy regulations/data protection requirements such as GDPR

Nice to Haves

Experience building and maintaining Compliance-as-Code capabilities, including policy-as-code, automated control validation, continuous evidence collection, and monitoring integrated into CI/CD pipelines
Relevant security certifications (e.g., CISSP, CISM, CCSP)
Familiarity with additional certification frameworks such as FedRAMP or CRA
Experience with Cisco security mandates, policies, tooling, or product security processes
Strong written and verbal communication skills for explaining security risks, requirements, priorities, and tradeoffs to technical and non-technical audiences

Assessing and guiding improvements to the security posture of Hypershield components and delivery workflows
Interpreting Cisco-level security mandates, policies, audit requirements, release gates, and best practices into clear guidance and remediation priorities
Partnering with development teams, architects, product management, SRE, compliance, and security/privacy teams to review new features and architecture changes, identifying gaps and recommending mitigations
Supporting compliance with Cisco security mandates and Build Environment Security requirements by clarifying requirements, reviewing audit findings, and guiding remediation
Defining and contributing to security and compliance automation, reporting, and tooling to improve visibility, reduce manual work, and ensure consistent adherence to security requirements

Opportunity to work with leading edge open-source and enterprise technologies in cloud native infrastructure
Inclusive and diverse workplace culture fostering respect, value, and empowerment for all team members
Collaboration with global experts and innovators on impactful solutions in AI and security
Chance to contribute to Cisco’s mission and make a global impact through transformative technology