Software Security Engineer

Overview

Join Cisco's Supply Chain & Legal IT Security team to develop, secure, and deliver new capabilities for the supply chain, including AI-driven toolsets and processes, in a Scrum Agile environment.

What you'll do

• Work with a team of engineers and architects responsible for software design, development and building applications in a Scrum Agile environment.
• Experience in delivering AI-native full-stack user stories as part of agile scrum-team work.
• Conduct security assessments, scans, and audits to identify and mitigate vulnerabilities in applications and infrastructure.
• Perform lightweight application and infrastructure penetration testing.
• Implement and carry out security best practices for applications, AI platforms/agents, infrastructure as code (IaC), cloud services, and network architectures.
• AI red-team testing, prompt stress testing, secure MCP/A2A agent validation and defining Policy Based Access Controls.
• Integrate security tools and checks into the CI/CD pipeline and AI Tools to automate the build, test, and deployment process.
• Develop code, debug security issues, suggest improvements, review code, provide solutions to systemic problems and be hands-on with various code bases and technology stacks.
• Collaborate with Engineers, Subject Matter Experts, Vendors and Architects to build and peer review applications, handle Skills-libraries and align with a secure architectural vision.
• Work closely with the Scrum master, Product owner, and global delivery teams to drive and contribute to project releases and sprint work.
• Fix security vulnerabilities and keep the application secure.
• Mentor and provide technical support to junior colleagues.
• Design, develop, and optimise in-app and role-based AI Agents with secure, scalable semantic layers, multi-agent protocols, and agent training features.
• Collaborate cross-functionally to integrate agents with external tools and services, contributing to a robust integration framework.
• Collaborate across teams to develop a culture of shared security responsibility with developers and operations teams.
• Supervise for security threats, respond to and mitigate security incidents, and perform post-mortem/root cause analysis to prevent future occurrences.
• Develop and carry out security policies and procedures and ensure compliance with regulations.

What you'll need

• 5+ years of experience as a SOC Analyst, Detection Engineer, Security Engineer, or Threat Intelligence Analyst or in an adjacent IT field.
• Strong understanding of AI/ML concepts and experience implementing AI techniques and MCP tools in practical applications, as well as proficiency in security.
• Proficiency in DevSecOps principles, application security, and application security testing.
• Experienced in the MEAN stack, API security, and application integration.
• Good understanding of the MITRE ATT&CK framework.
• Experience developing microservices using any of the following: Angular, GoLang, Python, Node JS, JAVA, Java/Typescript and Restful Services.
• Good understanding of Agile and DevSecOps practices and toolsets.
• Proficiency with CI/CD tools, cloud security services, and IaC tools.
• Knowledge of secure coding practices, scripting, and automation.
• Proficiency in SQL, PL/SQL and extensive hands-on experience with relational, in-memory and NoSQL databases, including Oracle, Snowflake and Mongo.
• Positive, self-starter demeanor with strong communication and time management abilities; works independently but seeks guidance from leaders when needed.
• Acts as a resource for colleagues with less experience.

Nice to have

• Professional understanding of HTTP data interchange and operations, TCP ports, and anomalous action logging.
• Working knowledge of HTTP intercept/forwarding, proxies and mutating/poisoning data payloads.
• Experience with Pentesting and tooling like Caido and Burp Suite.
• Familiarity with cloud services such as Oracle Cloud, AWS, and Azure.
• Experience with REACT, Angular, Node, JAVA, Java/TypeScript, RPA technologies, Oracle, Mongo, and Snowflake.
• Experience with test automation strategies and tools, such as UiPath, Playwright or Fluent.
• Advanced prompt engineering skills.
• Over 5 years of experience with full-stack development, design, and technically leading application development.
• Certifications in Java, DB, Cloud, AWS and AI/ML are highly valued.

Details

• Location: Bangalore, India.