DevSecOps Engineer – AI & Cloud Security

Overview

Join Cisco's AI Strategic Planning Group on the Cloud Control & AI Canvas team to build and secure cloud infrastructure and enterprise AI platforms, with security positioned as an enabler of innovation.

What you'll do

• Build AI agent workflows to automate alert triage, threat modeling, evidence collection, and guided incident response with human-in-the-loop guardrails.
• Design and implement secure-by-default AWS cloud foundations, advancing IAM least privilege, data encryption, network segmentation, and automated guardrails.
• Build CI/CD automation with GitHub Actions and Terraform, including container security tooling (SAST/DAST/SCA, SBOMs, artifact signing).
• Partner early with engineering teams to conduct pragmatic threat modeling across microservices, APIs, Kubernetes, and AI/LLM applications.
• Streamline audit readiness and operational workflows for SOC 2, FedRAMP, and ISO 27001 using Python, APIs, and Infrastructure-as-Code.

What you'll need

• 7+ years of hands-on experience in Cloud Security, Application Security, or Software Engineering.
• Bachelor's degree or equivalent practical experience welcome.
• Proven experience securing AWS multi-account environments, including IAM policies, SCPs, WAF, KMS, CloudTrail, GuardDuty, and Security Hub.
• Proven scripting and automation capability in Python (or Go/Bash), with hands-on Terraform (IaC) and GitHub Actions (CI/CD pipelines).
• Experience performing security architecture reviews, threat modeling, and integrating vulnerability scanning into software delivery lifecycles.
• Daily comfort using AI coding assistants and modern developer tools (e.g., GitHub Copilot, Cursor, LLMs).
• Strong communication and teamwork skills, with a track record of partnering empathetically with developers to solve security challenges.

Nice to have

• Securing generative AI apps, prompt guardrails, and agent tool permissions.
• Automating audit evidence for SOC 2, FedRAMP, ISO 27001, or IRAP/ISMAP.
• Hands-on experience with SBOMs, provenance, and artifact signing (e.g., Sigstore/Cosign).
• Experience with SIEM logging, detection engineering, and incident triage.

Details

• Location: Bangalore, India.