Software Security Lead

Cisco

Software Security Lead securing Cisco’s enterprise IT and Operations platforms. Leading threat modeling, architecture reviews, AI security, and portfolio risk metrics.

Posted 9/4/2026full-timeRemote • Alabama, Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Idaho, Illinois, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Minnesota, Mississippi, Missouri, Montana, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin, Wyoming • 🇺🇸 United StatesSenior💰 $151,600 - $222,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in software/application security, secure software development, and security engineering, with a strong focus on threat modeling, secure design reviews, and risk-based remediation. Proficient in integrating AI securely into platforms and applying security metrics to drive outcomes.

Highest-signal resume keywords

Software/Application SecurityThreat ModelingSecure Design/Architecture ReviewsCloud-Native ApplicationsSecurity Metrics Definition

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Software DevelopmentRisk-Based RemediationSAST InterpretationDAST InterpretationSCA Results InterpretationAI Security FrameworksCI/CD PipelinesContainersKubernetesSBOM Generation

Soft Skills

Influencing LeadershipCollaboration Across Teams

Tools & Technologies

CryptographyIdentity and Access ManagementData SecurityEnterprise Application SecuritySoftware Supply Chain SecurityWorkflow Automation Platforms

Certifications & Qualifications

CISSPCSSLPCCSPGIAC

Industry Keywords

Security PostureSecurity DebtEvidence-Based ModelsArchitecture Trade-OffsSecurity-By-DesignSecurity-By-DefaultAI CapabilitiesArtifact SigningSLSA-Aligned Practices

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Serve as the security authority for Cisco’s IT and Enterprise Operations portfolio
Maintain a current, data-backed view of portfolio security posture
Translate threat trends, architectural shifts, and security debt into actionable priorities
Advise and influence Product Management, Engineering, IT/Enterprise Operations, and Business Information Security Officer partners
Review and approve secure designs across the portfolio
Apply security-by-design and security-by-default principles and make architecture trade-off decisions
Lead portfolio-wide threat modeling and ensure models are evidence-based and tied to design decisions
Integrate AI securely into in-scope platforms and apply Software Security AI frameworks
Advocate for AI capabilities that strengthen security outcomes
Coordinate security subject-matter experts in areas such as cryptography and identity
Present prioritized unmitigated security risks and residual security posture at release or delivery
Define and lead security engineering metrics covering risk reduction, mean time to remediate, security debt, and developer adoption

Requirements

What you’ll need

Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience
11+ years of experience in software/application security, secure software development, or security engineering, including a senior or lead role
Proven experience leading threat modeling and secure design/architecture reviews for complex software systems, including AI- and LLM-enabled features
Experience interpreting SAST, DAST, and SCA results
Experience translating security findings into risk-based, evidence-backed remediation guidance
Experience with cloud-native applications and modern CI/CD pipelines, including containers and Kubernetes
Ability to influence engineering and product leadership and drive security outcomes across teams without direct authority
Preferred depth in identity and access management, cryptography, data security, enterprise application security, or software supply chain security
Preferred experience with SBOM generation, artifact signing, and SLSA-aligned practices
Preferred experience partnering with IT, operations, or platform engineering teams on enterprise applications and workflow/automation platforms
Preferred experience defining and using security metrics
Relevant certifications such as CISSP, CSSLP, CCSP, or GIAC are preferred

Benefits

Comp & perks

Medical, dental and vision insurance
401(k) plan with Cisco matching contribution
Paid parental leave
Short- and long-term disability coverage
Basic life insurance
Cisco restricted stock unit grants may be available
10 paid holidays per full calendar year
1 floating holiday for non-exempt employees
Paid birthday off
Paid year-end holiday shutdown
4 paid personal wellness days
16 paid vacation days per full calendar year for non-exempt employees
Flexible vacation time off program for exempt employees
80 hours of sick time off provided on hire date and each January 1st
Up to 80 hours of unused sick time carried forward annually
Additional paid time away for critical or emergency family issues
Optional 10 paid volunteer days per full calendar year
Annual bonuses for non-sales roles, subject to Cisco policies