Vulnerability Risk Engineer: Cloud, Containers & Compliance

Cisco Systems, Inc.; Denver (CO); On-site; USD 129,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with Cisco matching

Paid parental leave

Short/long-term disability

Life insurance

Job summary

Cisco Systems, Inc. is seeking a Vulnerability Management Specialist to lead assessments and drive remediation across complex infrastructure. You will partner with engineering teams to mitigate risks, contribute to audit readiness, and help define security standards for scalable platforms.

The role emphasizes collaboration, threat modeling, and leveraging Splunk SPL to translate data into actionable insights for vulnerability tracking and reporting.

Qualifications

• Vulnerability management lifecycle: 3+ years of experience in the vulnerability management lifecycle, including the assessment, prioritization, and hands-on remediation of security vulnerabilities within complex infrastructure.
• Compliance & Standards: Experience assessing or applying configuration compliance standards (e.g., CIS Benchmarks, DISA STIGs) to harden infrastructure and cloud environments to meet regulatory requirements (e.g., PCI DSS, SOC2, HIPAA, FedRAMP)
• Risk-Based Prioritization: Experience utilizing threat modeling and CVSS scoring to prioritize vulnerabilities based on business impact and technical risk.
• Container & Orchestration Security: Experience securing containerized environments and orchestration platforms, specifically Docker and Kubernetes.
• Cloud & SaaS Architecture: Technical experience with cloud operational models and the security requirements of SaaS architectures built on microservices.

Responsibilities

• Lead vulnerability assessments and set new security standards across teams.
• Collaborate with engineering to address risks and drive critical fixes to completion.
• Navigate audits and compliance, focusing on security requirements beyond the letter of the law.

Skills

Vulnerability management lifecycle

Compliance & standards

Risk-based prioritization

Container & orchestration security

Cloud & SaaS security

Splunk & SPL

CI/CD & IaC security

Communication

Self-driven growth

Enterprise scanning platforms

Tools

Docker

Kubernetes

Job description

Cisco Systems, Inc. is seeking a Vulnerability Management Specialist to lead assessments and drive remediation across complex infrastructure. You will partner with engineering teams to mitigate risks, contribute to audit readiness, and help define security standards for scalable platforms.

The role emphasizes collaboration, threat modeling, and leveraging Splunk SPL to translate data into actionable insights for vulnerability tracking and reporting.