Cisco
Technical Leader- Platform Security
Milpitas, California, US · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Green-card follow-through: 93%
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- You will work across the full stack-from hardware and firmware to Linux and networking operating systems like SONiC-to establish a secure chain of trust.
- Your leadership will define how we protect our platforms throughout their entire lifecycle, ensuring integrity from manufacturing through production deployment.
Responsibilities
- Drive the implementation of UEFI Secure Boot (PK, KEK, db, dbx), including enrollment, rotation, revocation, and debug processes.
- Define and manage manufacturing and field provisioning of keys and certificates to ensure platform identity.
- Conduct thorough platform threat modeling, lead security reviews, and provide mentorship to engineering teams across hardware, firmware, and software domains.
Requirements
- Bachelor's degree with 8 years of related experience, or Master's degree with 6 years of related experience, or PhD with 3 years of related experience.
- Minimum 5 years of experience in C/C++ and Python/shell, with demonstrated ability to debug across firmware, Linux, and hardware layers.
- Minimum 8 years of experience in platform, firmware, or system security.
- Minimum 5 years of specific expertise in UEFI Secure Boot, Linux boot/kernel architectures, and hardware Root of Trust (TPM or equivalent).
- 8 years of strong Linux system expertise, covering boot processes, kernels, drivers, and firmware interfaces within SONiC or similar networking operating systems.
Nice to have
- Experience with OpenBMC, Caliptra/DICE, or PKI/X.509 standards.
- Proficiency in kernel/module signing and working with NPU platforms.
- Familiarity with FIPS/Common Criteria compliance or relevant open-source security contributions.
- We work as a team, collaborating with empathy to make really big things happen on a global scale.
- Because our solutions are everywhere, our impact is everywhere.
- Message to applicants applying to work in the U.S. and/or Canada:
- U.S. employees are eligible for paid time away as described below, subject to Cisco's policies:
Compensation
- The starting salary range posted for this position is $186,900.00 to $267,700.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benef
Company info
- At Cisco, we're revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond.
- These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
- We are Cisco, and our power starts with you.
- Our Platform Security team is at the heart of protecting the infrastructure that powers the internet.
- We are a group of specialized engineers focused on building the secure foundation for next-generation networking.
- From silicon bring-up to the OS layer, we collaborate across disciplines to ensure that security is not just an add-on, but a fundamental part of our platform architecture.
This listing is sourced directly from Cisco's careers page and normalized into a canonical job model.