Software Security Lead

Cisco

Software Security Lead securing Cisco’s enterprise IT and Operations platforms. Leading threat modeling, secure architecture, AI security, and portfolio risk reduction.

Posted 9/4/2026full-timeRemote • Alabama, Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Idaho, Illinois, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Minnesota, Mississippi, Missouri, Montana, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin, Wyoming • 🇺🇸 United StatesSenior💰 $139,300 - $203,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in software/application security, secure software development, and security engineering, with a focus on threat modeling, secure design reviews, and risk-based remediation. Proficient in integrating AI securely into platforms and applying security metrics to drive outcomes.

Highest-signal resume keywords

Software/Application SecurityThreat ModelingSecure Design/Architecture ReviewsCloud-Native ApplicationsSecurity Metrics Definition

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Software DevelopmentRisk-Based RemediationSAST InterpretationDAST InterpretationSCA Results AnalysisSBOM GenerationArtifact SigningKubernetesCI/CD PipelinesSecurity Engineering

Soft Skills

Influencing LeadershipCollaboration Across Teams

Tools & Technologies

AI FrameworksCryptography ToolsIdentity and Access Management ToolsData Security SolutionsEnterprise Application Security Tools

Certifications & Qualifications

CISSPCSSLPCCSPGIAC

Industry Keywords

Security PostureSecurity DebtSecurity-By-DesignSecurity-By-DefaultEvidence-Based DesignLLM-Enabled FeaturesSoftware Supply Chain Security

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Serve as the security authority for Cisco’s IT and Enterprise Operations portfolio
Maintain a current, data-backed view of portfolio security posture
Translate threat trends, architectural shifts, and security debt into actionable priorities
Advise and influence Product Management, Engineering, IT/Enterprise Operations, and Business Information Security Officer partners
Review and approve secure designs across the portfolio
Adapt security-by-design and security-by-default principles to each context
Lead portfolio-wide threat modeling and connect models to defensible, evidence-based design decisions
Integrate AI securely into in-scope platforms and apply Software Security AI frameworks
Advocate for AI capabilities that strengthen security outcomes
Coordinate security subject-matter experts in areas such as cryptography and identity
Present prioritized unmitigated security risks at release or delivery
Define and lead security engineering metrics, including risk reduction, mean time to remediate, security debt, and developer adoption

Requirements

What you’ll need

Bachelor’s degree in computer science, Engineering, or a related field (or equivalent practical experience)
7+ years of experience in software/application security, secure software development, or security engineering, including a senior or lead role
Proven experience leading threat modeling and secure design/architecture reviews for complex software systems, including AI- and LLM-enabled features
Experience interpreting SAST, DAST, and SCA results
Experience translating findings into risk-based, evidence-backed remediation guidance
Experience with cloud-native applications and modern CI/CD pipelines, including containers and Kubernetes
Ability to influence engineering and product leadership and drive security outcomes across teams without direct authority
Specialized expertise in one or more of identity and access management, cryptography, data security, enterprise application security, or software supply chain security
Experience with SBOM generation, artifact signing, and SLSA-aligned practices
Experience partnering with internal IT, operations, or platform engineering teams
Experience defining and using security metrics
Relevant certifications such as CISSP, CSSLP, CCSP, or GIAC are preferred

Benefits

Comp & perks

Medical, dental and vision insurance
401(k) plan with a Cisco matching contribution
Paid parental leave
Short- and long-term disability coverage
Basic life insurance
Cisco restricted stock unit grants may be available
10 paid holidays per full calendar year
1 floating holiday for non-exempt employees
Paid birthday day off
Paid year-end holiday shutdown
4 paid personal wellness days
16 paid vacation days per full calendar year for non-exempt employees
Flexible vacation time off program with no defined limit for eligible exempt employees
80 hours of sick time off provided on hire date and each January 1st
Up to 80 hours of unused sick time carried forward
Additional paid time away for critical or emergency family issues
Optional 10 paid volunteer days per full calendar year
Annual bonuses for non-sales roles, subject to Cisco policies