Vulnerability Management Engineer — Cloud & Compliance

Cisco Systems; Boise (ID); On-site; USD 129,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan with Cisco matching

Paid parental leave

Disability coverage

Life insurance

Paid time off

Job summary

The Cisco Splunk Vulnerability Management team is seeking a security‑minded professional to lead vulnerability assessments and establish resilient standards across complex infrastructure. You will collaborate with engineering to remediate risks, guide audits, and advance our defense posture against evolving threats.

This role emphasizes a security‑first mindset, cross‑functional collaboration, and proactive communication with executive stakeholders to translate risk into actionable fixes and

Qualifications

• 3+ years in vulnerability management lifecycle with remediation experience.
• Experience applying CIS Benchmarks/DISA STIGs to harden infra and cloud environments.
• Threat modeling and CVSS-based prioritization of vulnerabilities.

Responsibilities

• Lead vulnerability assessments and set new security standards.
• Partner with engineering to address risks and push critical fixes.
• Navigate audits and compliance in a security-first program.
• Prioritize threats and drive an effective defense strategy.

Skills

Vulnerability management lifecycle

Compliance & standards

Risk-based prioritization

Container & orchestration security

Cloud & SaaS security

Splunk & SPL proficiency

CI/CD & IaC security

Proactive communication

Self-driven growth

Enterprise scanning platforms

Tools

Docker

Kubernetes

Job description

The Cisco Splunk Vulnerability Management team is seeking a security‑minded professional to lead vulnerability assessments and establish resilient standards across complex infrastructure. You will collaborate with engineering to remediate risks, guide audits, and advance our defense posture against evolving threats.

This role emphasizes a security‑first mindset, cross‑functional collaboration, and proactive communication with executive stakeholders to translate risk into actionable fixes and