Senior Linux Security Engineer

## Responsibilities - Responsible for security engineering and operations supporting Cisco IT compute and AI infrastructure. - Actively participates in the Security cross-functional team of Prime Security Advocates to implement security policies across Cisco IT infrastructure. - Collaborates with Security and Trust teams to identify improvement areas and develop engineering solutions. - Validates security posture for AI infrastructure including patching, vulnerability scanning, software development, and open-source software management. - Serves as a key point of contact for security issues, incident response, vulnerability management, and implementation of security solutions. - Contributes to modernizing Linux Operating System build systems through advanced automation and secure-by-default configurations. - Acts as a technical resource for embedding security practices into all aspects of Cisco IT engineering including code development, integrated security scanning, and code analytics review to address security issues pre-release. - Participates in defining strategy and maintaining the roadmap for adoption, expansion, and integration of security monitoring platforms. - Engages in incident response investigations and response activities to support organizational security objectives. ## Requirements - 6+ years of experience with Linux security (Sudoers, SELinux, and other hardening principles). - 6+ years of experience in large-scale IT infrastructure, including compute, network, or storage systems. - Experience with Linux Operating System image / ISO development, hardening, and deployment through CI/CD pipelines. - Experience with security scanning tools and agents covering SAST, DAST, SCA, and secrets detection. - Experience working with DevOps Infrastructure-as-Code (IaaS) tooling including Ansible, GitHub, Python, Docker/Podman. ## Nice to Have - Understanding of private and public cloud infrastructure and what it takes to run infrastructure as code at scale. - Good understanding of network-based and host-based firewalls. - Experience with Privileged Access Management (PAM) tools like Delinea, BeyondTrust, or Cyberark. - Understanding of directory services like Active Directory and LDAP. - Experienced with agile software development process, vendor engagement, and product evaluations. ## Benefits - Starting salary range for this position is $118,700.00 to $160,600.00. - Benefits include medical, dental, and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. - Employees may be eligible to receive grants of Cisco restricted stock units. - Paid time away includes 10 paid holidays, 1 floating holiday, 1 paid day off for birthday, 4 paid days off for personal wellness, 16 days of paid vacation for non-exempt employees, and flexible vacation time for exempt employees. The application window is expected to close on: 06/30/2026. Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.