Software Engineer, IT Risk Management

Cisco is hiring a Software Engineer to build the technical engine for its IT Risk Management capability. The role develops agentic workflows, integrates enterprise risk signals, and implements controls and closed-loop processes to provide real-time risk insights and verify risk reduction.

Responsibilities:

• Design, build, and operate Circuit My Agent and sub-agent workflows that sense signals, map exposure, prioritize risk by business impact, and deliver real-time insights
• Integrate enterprise sources such as ServiceNow, ESP, CMDB, AppSec and vulnerability tooling, SOX evidence, resilience tests, and audit or MAP actions into trusted risk intelligence
• Implement rules, guardrails, and automated controls that detect drift or unsafe change across systems, models, data, and dependencies, with human review for exceptions
• Test resilience, control effectiveness, and AI lifecycle safeguards before disruption and as systems evolve, using telemetry and evidence to identify gaps
• Build closed-loop workflows that track action, verify risk reduction, and develop lessons back into design
• Partner with the Risk Lead, domain owners, Security Primes, PSAs, and engineers to productionize the capability

Requirements:

• 8+ years of software engineering experience building production applications, integrations, or automation
• AI-first attitude with demonstrated ability to experiment with emerging models, developer tools, and agentic workflows; knows the latest model capabilities and challenges established ways of working
• Experience building APIs, event-driven services, or automated workflows using Python, TypeScript/JavaScript, or a comparable language
• Experience integrating signals or telemetry from multiple enterprise systems into risk intelligence, alerts, dashboards, or operational reporting
• Experience with source control, CI/CD, and automated testing for services running in production
• Bachelor's degree in Computer Science, Software Engineering, Information Systems, or a related field
• Hands-on experience applying AI models, agents, or sub-agents to improve engineering productivity, quality, or risk reduction; evaluates emerging tools and trends and turns useful experiments into production capabilities
• Experience with IT risk, security, compliance, resilience, or control data, such as SOX evidence, vulnerabilities, CMDB, ServiceNow, or GRC platforms
• Experience implementing rules, telemetry, automated controls, or resilience and control-effectiveness testing for production systems
• Experience designing dashboards or measures for real-time risk insight, signal-to-action time, verified closure, automation coverage, or repeat-risk reduction
• Constructive communication and active listening
• Identifies obstacles early, follows through to reliable outcomes, and influences through peer networking