Software Engineer, IT Risk Management

The application window is expected to close on: 10/17/2026

2024990
- Software Engineer, IT Risk Management (Remote)

• The role is listed as remote and can be performed from anywhere in the US
• NOTE:
  
  Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.

Commerce Engineering Productivity & Platforms (CEP&P) is a fast-moving, multifaceted engineering organization that adapts quickly to changing business and technology needs. We are launching IT Risk Management (ITRM) to support all of Cisco AI + IT with real-time risk insight, resilience testing, and closed-loop remediation. CEP&P brings together shared-service functions that enable teams across Cisco. You’ll work with some of Cisco’s most cutting-edge engineers and technical leaders as we invent how AI-native delivery changes the way we build, operate, and manage risk.

You will build the technical engine that helps ITRM respond to risk at machine speed. You will use Circuit My Agent, and sub-agents to turn signals from security exposure, lifecycle and technical debt, SOX, resilience, identity and AI security, GRC, and portfolio ownership into real-time risk insights and closed-loop action. You will help move the organization from retrospective reporting to risk reduction that is tested, verified, and improved.

• Design, build, and operate Circuit My Agent and sub-agent workflows that sense signals, map exposure, prioritize risk by business impact, and deliver real-time insights.
• Integrate enterprise sources such as Service Now, ESP, CMDB, App Sec and vulnerability tooling, SOX evidence, resilience tests, and audit or MAP actions into trusted risk intelligence.
• Implement rules, guardrails, and automated controls that detect drift or unsafe change across systems, models, data, and dependencies, with human review for exceptions.
• Test resilience, control effectiveness, and AI lifecycle safeguards before disruption and as systems evolve, using telemetry and evidence to identify gaps.
• Build closed-loop workflows that track action, verify risk reduction, and develop lessons back into design.
• Partner with the Risk Lead, domain owners, Security Primes, PSAs, and engineers to product ionize the capability.

• 8+ years of software engineering experience building production applications, integrations, or automation.
• AI-first attitude with demonstrated ability to experiment with emerging models, developer tools, and agentic workflows; knows the latest model capabilities and challenges established ways of working.
• Experience building APIs, event-driven services, or automated workflows using Python, Type Script/JavaScript, or a comparable language.
• Experience integrating signals or telemetry from multiple enterprise systems into risk intelligence, alerts, dashboards, or operational reporting.
• Experience with source control, CI/CD, and automated testing for services running in production.

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or a related field.
• Hands‑on experience applying AI models, agents, or sub‑agents to improve engineering productivity, quality, or risk reduction; evaluates emerging tools and trends and turns useful experiments into production capabilities.
• Experience with IT risk, security, compliance, resilience, or control data, such as SOX evidence, vulnerabilities, CMDB, Service Now, or GRC platforms.
• Experience implementing rules, telemetry, automated controls, or resilience and control‑effectiveness testing for production systems.
• Experience designing dashboards or measures for real‑time risk insight, signal‑to‑action time, verified closure, automation coverage, or repeat‑risk reduction.
• Constr…