DevSecOps Engineer – AI & Cloud Security
Read straight from Cisco's careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationBangalore, India
Work modeon-site
Typefull-time
SenioritySenior
Experience7+ yrs
DepartmentEngineering
Company size10,000+ people
PostedOct 28, 2026 · 1w ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
7+ years of hands-on experience in Cloud Security, Application Security, or Software Engineering
Bachelor's degree or equivalent practical experience
Proven experience securing AWS multi-account environments, including IAM policies, SCPs, WAF, KMS, CloudTrail, GuardDuty, and Security Hub
Proven scripting and automation capability in Python (or Go/Bash) with hands-on Terraform (IaC) and GitHub Actions (CI/CD pipelines)
Experience performing security architecture reviews, threat modeling, and integrating vulnerability scanning into software delivery lifecycles
Daily comfort using AI coding assistants and modern developer tools (e.g., GitHub Copilot, Cursor, LLMs) to accelerate daily workflows
Strong communication and teamwork skills, with a track record of partnering empathetically with developers to solve security challenges
Securing generative AI apps, prompt guardrails, and agent tool permissions
Automating audit evidence for SOC 2, FedRAMP, ISO 27001, or IRAP/ISMAP
Hands-on with SBOMs, provenance, and artifact signing (e.g., Sigstore/Cosign)
Experience with SIEM logging, detection engineering, and incident triage
Skills
Python
Go
Bash
Terraform
GitHub Actions
AWS
IAM
SCP
WAF
KMS
CloudTrail
GuardDuty
Security Hub
GitHub Copilot
Cursor
LLMs
Sigstore
Cosign
SAST
DAST
SCA
SBOMs
Meet the Team
About the role
Welcome to the AI Strategic Planning Group (AI SPG) on the Cloud Control & AI Canvas team. We are a collaborative, forward-thinking team dedicated to building and securing the next generation of cloud infrastructure and enterprise AI platforms.
Here, security is an enabler of innovation, not a barrier. We believe in a culture of shared ownership, continuous learning, and psychological safety where diverse perspectives thrive. You will partner side-by-side with talented engineers, architects, and product innovators to pioneer secure-by-default cloud designs, agentic AI workflows, and modern DevSecOps practices on a global scale.
Your Impact:
•
Build cutting-edge AI agent workflows to automate alert triage, threat modeling, evidence collection, and guided incident response with built-in human-in-the-loop guardrails.
•
Design and implement robust, secure-by-default AWS cloud foundations—advancing IAM least privilege, data encryption, network segmentation, and automated guardrails.
•
Build seamless CI/CD automation with GitHub Actions, Terraform, and container security tooling (SAST/DAST/SCA, SBOMs, artifact signing) to empower developers to ship fast and securely.
•
Partner early with engineering teams to conduct pragmatic threat modeling across microservices, APIs, Kubernetes, and AI/LLM applications.
•
Streamline audit readiness and operational workflows for frameworks like SOC 2, FedRAMP, and ISO 27001 using Python, APIs, and Infrastructure-as-Code.
Minimum Qualifications (Must-Have Skills):
We are looking for a DevSecOps Engineer with 7+ years of hands-on experience in Cloud Security, Application Security, or Software Engineering. Bachelor’s degree or equivalent practical experience welcome.
•
Proven experience securing AWS multi-account environments, including IAM policies, SCPs, WAF, KMS, CloudTrail, GuardDuty, and Security Hub.
•
Proven scripting and automation capability in Python (or Go/Bash) with hands-on Terraform (IaC) and GitHub Actions (CI/CD pipelines).
•
Experience performing security architecture reviews, threat modeling, and integrating vulnerability scanning into software delivery lifecycles.
•
Daily comfort using AI coding assistants and modern developer tools (e.g., GitHub Copilot, Cursor, LLMs) to accelerate daily workflows.
•
Strong communication and teamwork skills, with a track record of partnering empathetically with developers to solve security challenges.
Preferred Qualifications (Optional Skills):
•
Securing generative AI apps, prompt guardrails, and agent tool permissions.
•
Automating audit evidence for SOC 2, FedRAMP, ISO 27001, or IRAP/ISMAP.
•
Hands-on with SBOMs, provenance, and artifact signing (e.g., Sigstore/Cosign).
•
Experience with SIEM logging, detection engineering, and incident triage.
Why Cisco?
At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.
We are Cisco, and our power starts with you.
Disclaimer
To ensure that we hire the best talent in the right way, we follow a strict hiring process and recently, Cisco has been made aware of fraudulent recruiters claiming to be from the company. Please be advised that any communication from Cisco about careers will:
•
be in direct response to an application you have submitted through the company career site
•
begin with screening or an interview
•
originate from a Cisco email address, and
•
be conducted across email, phone, or WebEx
Cisco will never make a job offer without conducting an interview process or ask you for money in any way. If you have been requested to apply for a role or have received an offer from a site other than https://careers.cisco.com or cisco.wd5.myworkday.com, do not provide any personal identifying information, including your Aadhaar or other personal identifying number, birth certificate, banking information, driver’s license, or passport.
If you are the target of a recruiting scam, consider filing a report with your local law enforcement authorities. Cisco bears no responsibility, and cannot be held liable, for any claims, damages, expenses, or other inconvenience resulting from or in any way connected to recruiting scams.