Security Engineer

Cisco; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Cisco is seeking a Senior Security Engineer to design and operate security observability across SaaS, cloud, and endpoints. You will translate requirements into scalable monitoring, identify drift and control failures, and automate remediation workflows with a focus on AI-enabled security.

Ideal candidates will guide complex initiatives, mentor junior engineers, and collaborate with multiple security teams to secure our software and infrastructure at scale from Bengaluru, India, leveraging

Qualifications

• Strong experience in security engineering, security architecture, security observability, AI, cloud security, vulnerability management, or security operations.
• Experience integrating security platforms through APIs, connectors, webhooks, or event-driven workflows.
• Hands-on experience with SIEM, SSPM, cloud security, AI, asset inventory, or workflow automation platforms.
• Working knowledge of SaaS security configurations, cloud services, Kubernetes, identity controls, logging, vulnerabilities, and application architectures.
• Ability to automate workflows using Python, APIs, Tines, or comparable technologies.
• Experience translating security requirements into technical monitoring and validation logic.
• Strong troubleshooting, documentation, stakeholder management, and risk analysis skills.
• Ability to independently lead complex technical work from discovery through production implementation.

Responsibilities

• Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints.
• Translate security requirements into measurable configuration baselines and monitoring controls.
• Understand security architecture and where risks are presented in a security review.
• Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems.
• Develop dashboards that provide application owners with a consolidated view of configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items.
• Create and tune monitoring rules to improve detection accuracy and reduce false positives.
• Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure.
• Lead onboarding of critical and high-risk applications into the monitoring programme.

Skills

Security engineering

Security architecture

Security observability

AI in security

Cloud security

Vulnerability management

Security operations

APIs integration

SIEM

SSPM

Kubernetes

Python

Tines

Splunk

Jira

ServiceNow

Tools

Axonius

Wiz

Splunk

ServiceNow

Jira

Tines

Job description

Meet the Team

Develops and executes software and operational security controls, defences, and countermeasures to intercept and prevent security risks. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities.

Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third‑party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs.

Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks, and leads or participates in security architecture and design review meetings.

Your Impact

The Senior Security Engineer will help build and operate security observability capabilities across SaaS applications, homegrown applications, and cloud environments, and endpoints. This role converts security requirements into scalable monitoring, identifies configuration drift and control failures, integrates telemetry from multiple security platforms, and automates remediation workflows.

The engineer will work independently on complex initiatives and provide technical guidance to other team members while supporting the technical leads.

Key Responsibilities

• Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints.
• Translate security requirements into measurable configuration baselines and monitoring controls.
• Strong AI understanding: how to use AI and create agents to help automate processes and tasks
• Understand security architecture and where risks are presented in a security review
• Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems.
• Determine which telemetry can be centralised in our tools and design solutions for remaining coverage gaps.
• Develop dashboards that provide application owners with a consolidated view of configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items.
• Create and tune monitoring rules to improve detection accuracy and reduce false positives.
• Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure.
• Lead onboarding of critical and high‑risk applications into the monitoring programme.
• Partner with application owners to remediate findings and validate that risks have been resolved.
• Support remediation campaigns and measure risk reduction across participating applications.
• Escalate critical, high‑risk, or overdue findings according to established security standards.
• Partner with AI security teams, consulting teams, ID&R, identity, cloud security, software security, privacy, and other specialist teams.
• Document architectures, data flows, monitoring coverage, control logic, operational procedures, and technical decisions.
• Mentor less‑experienced engineers and serve as a technical backup to the Observability Technical Lead.

Required Qualifications

• Strong experience in security engineering, security architecture, security observability, AI, application security, cloud security, vulnerability management, or security operations.
• Experience integrating security platforms through APIs, connectors, webhooks, or event‑driven workflows.
• Hands‑on experience with SIEM, SSPM, cloud security, AI, asset inventory, or workflow automation platforms.
• Working knowledge of SaaS security configurations, cloud services, Kubernetes, identity controls, logging, vulnerabilities, and application architectures.
• Ability to automate workflows using Python, APIs, Tines, or comparable technologies.
• Experience translating security requirements into technical monitoring and validation logic.
• Strong troubleshooting, documentation, stakeholder management, and risk analysis skills.
• Ability to independently lead complex technical work from discovery through production implementation.

Preferred Qualifications

• Experience with Axonius, Wiz, Splunk, Jira, ServiceNow, and/or Tines.
• Experience building security dashboards and normalising data across multiple sources.
• Knowledge of endpoint security and monitoring local AI models, agents, MCP usage, and AI‑assisted development tools.
• Experience with root‑cause correlation, automated remediation validation, and configuration‑drift monitoring.
• Familiarity with AI security risks and production AI monitoring.

WeAreCisco

WeAreCisco, where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all.

Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company and many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best but also be their best.

We understand our outstanding opportunity to bring communities together, and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organisations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer—80 hours each year—allows us to give back to causes we are passionate about, and nearly 86% do!

Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us!

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.