Security Engineer

123 Cisco Systems (India) Private Limited; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Benefits offered by this job

Hybrid work model

Volunteer time off

Inclusive communities

Job summary

Cisco Systems, Inc. in Hyderabad, India is seeking a Senior Security Engineer to design and operate security observability across SaaS, homegrown apps, cloud, and endpoints. You will translate requirements into scalable monitoring, identify drift, and automate remediation.

Collaborate with AI security teams and multiple toolchains to strengthen security postures. The role requires strong security engineering background, experience with SIEM and cloud security, and the ability to lead complex

Qualifications

• Strong experience in security engineering and observability.
• Experience with security platforms via APIs or event-driven workflows.
• Hands-on with SIEM, SSPM and cloud security tooling.
• Knowledge of SaaS and cloud architectures, Kubernetes, and identity controls.
• Ability to automate workflows using Python and APIs.

Responsibilities

• Design and implement continuous security monitoring for SaaS, cloud, and endpoints.
• Translate requirements into measurable configuration baselines and controls.
• Develop dashboards to show drift, vulnerabilities, and remediation status.
• Automate ticketing, risk routing, and remediation workflows.
• Lead onboarding of critical applications into monitoring programs.
• Mentor junior engineers and support the Observability Technical Lead.

Skills

Security engineering

Security architecture

Observability

AI in security

Cloud security

Vulnerability management

Security operations

Python automation

APIs & integration

Education

Bachelor's degree in CS/Engineering

Tools

SIEM

SSPM

Cloud security tooling

AI security tools (Axonius, Wiz, Splunk)

Jira

ServiceNow

Tines

Job description

Meet the Team

Develops and executes software and operational security controls, defences, and countermeasures to intercept and prevent security risks. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities. Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third‑party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs. Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks, and leads or participates in security architecture and design review meetings.

Your Impact The Senior Security Engineer will help build and operate security observability capabilities across SaaS applications, homegrown applications, and cloud environments, and endpoints. This role converts security requirements into scalable monitoring, identifies configuration drift and control failures, integrates telemetry from multiple security platforms, and automates remediation workflows. The engineer will work independently on complex initiatives and provide technical guidance to other team members while supporting the technical leads.

Key Responsibilities

• Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints.
• Translate security requirements into measurable configuration baselines and monitoring controls.
• Strong AI understanding: how to use AI and create agents to help automate processes and tasks
• Understand security architecture and where risks are presented in a security review
• Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems.
• Determine which telemetry can be centralised in our tools and design solutions for remaining coverage gaps.
• Develop dashboards that provide application owners with a consolidated view of configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items.
• Create and tune monitoring rules to improve detection accuracy and reduce false positives.
• Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure.
• Lead onboarding of critical and high‑risk applications into the monitoring programme.
• Partner with application owners to remediate findings and validate that risks have been resolved.
• Support remediation campaigns and measure risk reduction across participating applications.
• Escalate critical, high‑risk, or overdue findings according to established security standards.
• Partner with AI security teams, consulting teams, ID&R, identity, cloud security, software security, privacy, and other specialist teams.
• Document architectures, data flows, monitoring coverage, control logic, operational procedures, and technical decisions.
• Mentor less‑experienced engineers and serve as a technical backup to the Observability Technical Lead.

Required Qualifications

• Strong experience in security engineering, security architecture, security observability, AI, application security, cloud security, vulnerability management, or security operations.
• Experience integrating security platforms through APIs, connectors, webhooks, or event‑driven workflows.
• Hands‑on experience with SIEM, SSPM, cloud security, AI, asset inventory, or workflow automation platforms.
• Working knowledge of SaaS security configurations, cloud services, Kubernetes, identity controls, logging, vulnerabilities, and application architectures.
• Ability to automate workflows using Python, APIs, Tines, or comparable technologies.
• Experience translating security requirements into technical monitoring and validation logic.
• Strong troubleshooting, documentation, stakeholder management, and risk analysis skills.
• Ability to independently lead complex technical work from discovery through production implementation.

Preferred Qualifications

• Experience with Axonius, Wiz, Splunk, Jira, ServiceNow, and/or Tines.
• Experience building security dashboards and normalising data across multiple sources.
• Knowledge of endpoint security and monitoring local AI models, agents, MCP usage, and AI‑assisted development tools.
• Experience with root‑cause correlation, automated remediation validation, and configuration‑drift monitoring.
• Familiarity with AI security risks and production AI monitoring.

# WeAreCisco # WeAreCisco, where every individual brings their unique skills and perspectives together to pursue our purpose of powering an inclusive future for all. Our passion is connection—we celebrate our employees’ diverse set of backgrounds and focus on unlocking potential. Cisconians often experience one company and many careers where learning and development are encouraged and supported at every stage. Our technology, tools, and culture pioneered hybrid work trends, allowing all to not only give their best but also be their best. We understand our outstanding opportunity to bring communities together, and at the heart of that is our people. One-third of Cisconians collaborate in our 30 employee resource organisations, called Inclusive Communities, to connect, foster belonging, learn to be informed allies, and make a difference. Dedicated paid time off to volunteer—80 hours each year—allows us to give back to causes we are passionate about, and nearly 86% do! Our purpose, driven by our people, is what makes us the worldwide leader in technology that powers the internet. Helping our customers reimagine their applications, secure their enterprise, transform their infrastructure, and meet their sustainability goals is what we do best. We ensure that every step we take is a step towards a more inclusive future for all. Take your next step and be you, with us.

Why Cisco? At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint. Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. We are Cisco, and our power starts with you.

Cisconians power the future. We make impact as a team, innovating fast and fearlessly to create meaningful solutions on a large scale. The depth and breadth of our technology doesn't just benefit our customers – it also means limitless opportunities for us to experiment and learn. We understand the power each of our unique backgrounds bring when we work together. Because of that, we have a global network of thinkers, doers, experts, and curious creators who help one another do their life’s best work.