Vulnerability Management Engineer — Security & Compliance Focus

Cisco Systems; Miami (FL); On-site; USD 129,000 - 185,000; Full time

Job summary

Cisco Systems is seeking a Vulnerability Management professional within the Splunk Vulnerability Management team. You will turn security data into actionable insights and partner with engineering to remediate risks, helping keep Cisco's platforms secure.

The role emphasizes audits and compliance, threat modeling, and securing cloud and container environments, with a focus on prioritizing vulnerabilities and setting defense standards across on‑prem and cloud.

Qualifications

• 3+ years in vulnerability management lifecycle, incl. assessment, prioritization and remediation across complex infra.
• Experience applying configuration standards (CIS Benchmarks, DISA STIGs) to harden cloud/native infra to meet regulatory requirements (PCI DSS, SOC2, HIPAA, FedRAMP).
• Experience using threat modeling and CVSS to prioritize vulnerabilities by business impact and risk.
• Experience securing containerized environments and orchestration platforms (Docker, Kubernetes).
• Technical experience with cloud operating models and security requirements of SaaS on microservices.

Responsibilities

• Lead vulnerability assessments and set new security standards for our products.
• Partner with engineering teams to address risks head‑on and drive critical fixes to completion.
• Navigate audits and compliance, focusing on security requirements rather than just the letter of the law.

Skills

Vulnerability Management Lifecycle

Compliance & Standards

Risk-Based Prioritization

Container & Orchestration Security

Cloud & SaaS Architecture

Tools

Splunk

Terraform

CloudFormation

Tenable

Qualys

Rapid7

Docker

Kubernetes

Job description

Cisco Systems is seeking a Vulnerability Management professional within the Splunk Vulnerability Management team. You will turn security data into actionable insights and partner with engineering to remediate risks, helping keep Cisco's platforms secure.

The role emphasizes audits and compliance, threat modeling, and securing cloud and container environments, with a focus on prioritizing vulnerabilities and setting defense standards across on‑prem and cloud.