Security Research Engineering Lead

Cisco

. Serve as the security authority for the product portfolio .

Posted 10/21/2026full-timeRemote • United StatesSenior💰 $151,600 - $222,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security architecture and threat modeling, with a strong focus on integrating security controls into CI/CD pipelines and cloud-native environments. Proven ability to influence cross-functional teams and drive security outcomes through data-backed risk assessments and metrics.

Highest-signal resume keywords

Threat ModelingSecure Design ReviewsCI/CD Security IntegrationSAST/DAST/SCA InterpretationSecurity Metrics Definition

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitectureRisk AssessmentAI Security IntegrationCryptographyApplication SecurityData SecurityIdentity And Access ManagementSoftware Supply Chain SecuritySBOM GenerationVulnerability Research

Soft Skills

Influencing Without AuthorityCross-Functional CollaborationPresentation Skills

Tools & Technologies

KubernetesContainersCI/CD PipelinesSoftware Security AI FrameworksWorkflow Automation Platforms

Certifications & Qualifications

CISSPCSSLPCCSPGIAC

Industry Keywords

Security PostureRisk ReductionSecurity DebtEmerging Security ThreatsIndustry-Standard Security Frameworks

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Serve as the security authority for the product portfolio
Maintain a current, data-backed view of portfolio security posture and risk
Translate threat trends, architectural shifts, and security debt into actionable priorities
Advise and influence Product Management, Engineering, IT/Enterprise Operations, and Business Information Security Officer partners
Set the architecture bar and review and approve secure designs across the portfolio
Adapt security by design and security by default to each context and make architecture trade-off decisions
Lead portfolio-wide threat modeling and tie models directly to design decisions
Integrate AI securely into in-scope platforms and apply Software Security AI frameworks
Advocate for AI capabilities that strengthen security outcomes
Threat-model and think like an attacker
Coordinate security subject-matter experts in cryptography, identity, and other areas
Present prioritized lists of unmitigated security risks at release or delivery
Define and lead security engineering metrics, including risk reduction, mean time to remediate, security debt, and developer adoption

Requirements

What you’ll need

Bachelor's degree plus 8 years of related experience, or Master's degree plus 6 years of related experience, or PhD plus 3 years of related experience, or equivalent related work experience
Proven experience leading threat modeling and secure design/architecture reviews for complex software systems, including AI- and LLM-enabled features
Demonstrated experience interpreting SAST, DAST, and SCA results and translating findings into risk-based, evidence-backed remediation guidance
Extensive experience integrating security controls into modern CI/CD pipelines and cloud-native environments, including Kubernetes and containers
Validated ability to influence engineering and product leadership and drive security outcomes across teams without direct authority
Specialized expertise in one or more of identity and access management, cryptography, data security, application security, or software supply chain security
Experience with SBOM generation, artifact signing, and SLSA-aligned practices
Experience partnering with internal information technology, operations, or platform engineering teams on applications and workflow/automation platforms
Experience defining and using security metrics to influence roadmap and investment decisions
Advanced knowledge of emerging security threats, vulnerability research, and industry-standard security frameworks
Relevant industry certifications such as CISSP, CSSLP, CCSP, or GIAC

Benefits

Comp & perks

Medical, dental and vision insurance
401(k) plan with a Cisco matching contribution
Paid parental leave
Short- and long-term disability coverage
Basic life insurance
Cisco restricted stock unit grants may be available
10 paid holidays per full calendar year
1 floating holiday for non-exempt employees
Paid employee birthday
Paid year-end holiday shutdown
4 paid days off for personal wellness
Non-exempt employees receive 16 days of paid vacation time per full calendar year
Exempt employees participate in Cisco's flexible vacation time off program with no defined limit, subject to availability and business limitations
80 hours of sick time off provided on hire date and each January 1st thereafter
Up to 80 hours of unused sick time carried forward
Additional paid time away for critical or emergency family issues
Optional 10 paid days per full calendar year to volunteer
Annual bonuses for non-sales roles, subject to Cisco's policies