Software Security Engineer

Cisco Systems, Inc; Bengaluru; On-site; INR 3,500,000 - 5,400,000; Full time

Job summary

Cisco Systems, Inc in Bengaluru is seeking an experienced security-minded software engineer who thrives on secure-by-design development within an Agile team. You will tackle AI-enabled security challenges and help shape architectures across applications and infrastructure.

You will collaborate with engineers, architects, and stakeholders to drive secure solutions, implement best practices in CI/CD, and mentor junior colleagues while advancing an AI-led transformation across projects.

Qualifications

• 5+ years in security or threat intel roles.
• Experience with AI-native security approaches.
• Proficiency in DevSecOps and secure coding practices.
• Experience with MEAN stack and RESTful services.
• Strong collaboration and communication skills.

Responsibilities

• Lead design and development in Scrum Agile teams.
• Deliver AI-native full-stack security user stories.
• Conduct security assessments, scans, and audits.
• Perform lightweight penetration testing of apps and infra.
• Automate security in CI/CD pipelines and AI tools.
• Mentor junior engineers and peers.
• Collaborate with cross-functional teams to secure architectures.
• Develop secure AI agents and ensure integration with external tools.

Skills

Security engineering

DevSecOps

AI/ML concepts

Full-stack development

Agile/Scrum

Tools

Caido

Burp Suite

AWS

Azure

Oracle Cloud

MongoDB

Job description

Job Summary

As an experienced security-minded software engineer, you possess a deep passion for application and infrastructure security and excel in developing solutions within agile environments. Your self-motivation and resourcefulness enable you to address complex security challenges and drive innovative solutions. You thrive in collaborative settings, working effectively with stakeholders to deliver growth and value across projects.

Your adaptability allows you to navigate ambiguity with ease, making you an asset in dynamic and evolving situations. You have a demonstrated ability to influence and inspire both within your team and across the organisation, contributing to strategic initiatives and fostering a culture of continuous improvement.

You are adept at the AI-led transformation and inspired to evolve our solutions and ways of working with an AI-focused approach.

Responsibilities

• Work with a team of engineers and architects responsible for the software design, development and building applications in a Scrum Agile environment.
• Experience in delivering AI-native full-stack user stories as part of agile scrum-team work.
• Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure
• Perform lightweight application and infrastructure penetration testing
• Implement and carry out security best practices for applications, AI platforms/agents, infrastructure as code IaC, cloud services, and network architectures.
• AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls.
• Automate security: Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process.
• Able to develop code, debug security issues, suggest improvements, review the code, provide solutions to systemic problems and be hands-on with various code bases and technology stacks.
• Collaborating with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, handle Skills-libraries and align with a secure architectural vision.
• Working closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work.
• Fix Security vulnerabilities and keep the application secure.
• Mentoring and providing technical support to junior colleagues.
• Design, develop, and optimise in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features.
• Collaborate cross-functionally to integrate agents with external tools and services, giving to a robust integration framework.

Minimum requirements

• 5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or in an adjacent IT field.
• Strong understanding of AI/ML concepts and experience in implementing AI techniques MCP tools in practical applications, as well as proficiency in security.
• Proficiency in DevSecOps principles, application security, and application security testing.
• Experienced in the MEAN stack, API security, and application integration.
• Good understanding of the MITRE ATTCK framework.
• Collaborate across teams: Work with developers and operations teams to develop a culture of shared security responsibility.
• Incident response: Supervise for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences.
<
• Implement security policies: Develop and carry out security policies and procedures and ensure compliance with regulations.
• Experience in developing microservices using any of the following technologies: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services.
• Good understanding of Agile and DevSecOps practices and toolsets.
• Proficiency with CI/CD tools, cloud security services, and IaC tools. Knowledge of secure coding practices, scripting, and automation is also vital.
• Proficiency in SQL, PL/SQL and Extensive hands-on experience with relational, in-memory and NoSQL databases, including Oracle, Snowflake and Mongo.
• Positive and self-starter demeanor, with a strong communication and time management abilities.
• Works independently but seeks guidance from leaders when needed and resolves the best approach to accomplish work. Acts as a resource for colleagues with less experience.

Preferred Requirements

• Professional understanding of HTTP data interchange and operations, TCP ports, and anomalous action logging.
• Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads.
• Experience with Pentesting and tooling like Caido and Burp Suite.
• Familiarity with cloud services such as Oracle Cloud, AWS, and Azure.
• Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, and Snowflake.
• Experience with test automation strategies and tools, such as UiPath, Playwright or Fluent.
• Advanced prompt engineering skills.
• Over 5 years of experience with full-stack development, design, and technically leading application development.
• Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.