Vulnerability Management Engineer — Secure Cloud & Apps

Cisco; Birmingham (AL); On-site; USD 129,000 - 185,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) matching

Parental leave

Disability coverage

Life insurance

Paid time off

Volunteer time off

Cisco RSUs

Job summary

Cisco is seeking a Vulnerability Management professional to lead security assessments, prioritize risks, and collaborate with engineering teams to remediate vulnerabilities across complex infrastructure and cloud environments.

You will drive security standards, participate in audits, and help shape the security posture of Cisco's products and platforms in a fast-paced, security-first culture.

Qualifications

• Vulnerability management lifecycle experience including assessment, prioritization and remediation.
• Experience applying CIS Benchmarks/DISA STIGs to harden infra and cloud environments.
• Risk-based prioritization using threat modeling and CVSS scoring.
• Experience securing containerized environments and orchestration platforms (Docker, Kubernetes).
• Technical experience with cloud architectures and security for microservices-based SaaS.

Responsibilities

• Turn complex security data into clear, actionable insights.
• Partner with engineering teams to address risks and drive critical fixes.
• Navigate audits and compliance programs with focus on security requirements.
• Define and enforce security standards across platforms to support resilience.

Skills

Vulnerability management

Threat modeling & CVSS

Compliance standards

Cloud & SaaS security

Container security

Tools

Splunk

SPL

Terraform

CloudFormation

Tenable

Qualys

Rapid7

Docker

Kubernetes

Job description

Cisco is seeking a Vulnerability Management professional to lead security assessments, prioritize risks, and collaborate with engineering teams to remediate vulnerabilities across complex infrastructure and cloud environments.

You will drive security standards, participate in audits, and help shape the security posture of Cisco's products and platforms in a fast-paced, security-first culture.