Lead Penetration Engineer — AI-Driven Security

Cisco; Seattle (WA); On-site; USD 139,000 - 204,000; Full time

Job summary

Cisco's Application Security team is seeking a senior penetration tester to lead engagements across on‑prem and cloud portfolios, crafting attack plans and delivering remediation guidance to development teams. You will build and operate agentic AI workflows to scale testing, drive risk‑based decisions, and help elevate product maturity while promoting a proactive security culture.

We value deep offensive security expertise and strong scripting ability in Python or Bash, plus hands‑on experience

Qualifications

• Bachelor’s degree with 7+ years in application-level penetration testing or Master’s with 4+ years or PhD with 1+ year.
• Advanced proficiency in offensive security across web, mobile, networks, and distributed systems.
• Deep technical understanding of vulnerabilities, attack vectors, and remediation strategies.
• Experience with public cloud platforms (AWS and GCP).
• Ability to develop and maintain custom tooling using Python or Bash.

Responsibilities

• Lead advanced penetration testing engagements for on-prem and cloud portfolios.
• Craft attack plans and provide remediation guidance to development teams.
• Build and operate agentic AI workflows to scale testing capabilities.
• Make risk-based decisions to uphold the highest security standards.
• Promote proactive security culture with human judgment and autonomous agents.

Skills

Offensive security

Web apps security

Mobile apps security

Networks security

Distributed systems security

AWS/GCP

Python

Bash

Education

Bachelor’s degree with experience

Master’s degree

PhD

Tools

Python

Bash

AWS

GCP

Job description

Cisco's Application Security team is seeking a senior penetration tester to lead engagements across on‑prem and cloud portfolios, crafting attack plans and delivering remediation guidance to development teams. You will build and operate agentic AI workflows to scale testing, drive risk‑based decisions, and help elevate product maturity while promoting a proactive security culture.

We value deep offensive security expertise and strong scripting ability in Python or Bash, plus hands‑on experience