Cisco is building security into the next generation of platforms and custom hyperscaler hardware architectures, and this role helps ensure those designs meet defined security, trust, and resilience expectations. As a Hardware Security Engineer focused on Hyperscaler Security, you will connect system-level requirements to real hardware implementation, guiding product, hardware, firmware, and vendor teams through concurrent security and compliance workstreams.
This hybrid position is based in Research Triangle Park (RTP), North Carolina with 3 days onsite. The expected application window closes on 11/29/2026.
Responsibilities
- Evaluate system-level hardware designs, schematics, board architectures, and component datasheets to identify threat vectors, vulnerabilities, and compliance gaps.
- Interpret, apply, and establish requirements aligned with emerging industry standards and compliance frameworks, including NIST SP 800-193 (Platform Firmware Resiliency), NSA CNSA 2.0 (Post-Quantum Cryptography / CNSA Suite), the EU Cyber Resilience Act (CRA), and internal Hardware Cisco Secure Development Lifecycle (HW-CSDL) mandates.
- Act as a technical advisor by providing clear, actionable security requirements and architectural design guidance to product teams, hardware design engineers, firmware/BIOS teams, and third-party vendors.
- Author hardware security requirements, review checklists, threat models, compliance white papers, and engineering specifications for internal and external consumption.
- Participate in and manage multiple concurrent security evaluations, design reviews, and compliance workstreams across diverse hardware programs.
Requirements
- Bachelor’s degree in Electrical Engineering, Computer Engineering, Computer Science, or a related technical field, plus 7+ years of relevant experience (or Master’s with 4+ years, or PhD with 1+ year).
- Experience in hardware development, including reading and interpreting system-level schematics, block diagrams, component datasheets, PCB design or review, or register-level hardware documentation.
- Background in hardware security fundamentals, including Hardware Root of Trust (RoT), Secure Boot, hardware and firmware resiliency, cryptographic primitives (symmetric/asymmetric encryption, hashing, digital signatures), and secure key storage.
Preferred Qualifications
- Experience crafting, implementing, or evaluating hardware-rooted attestation architectures and device identity mechanisms (e.g., SPDM, TCG DICE).
- Experience with hyperscaler and cloud platform architectures (e.g., OCP specifications, OpenBMC, Caliptra, OpenTitan, OpenPRoT).
- Experience implementing industry standard security IP or developing novel hardware security solutions (e.g., FPGA bitstream security, secure microcontroller architectures, HW RoT, bus encryption).
- Experience with hardware threat modeling or hardware security analysis (e.g., fault injection, side-channel analysis, JTAG/debug security).
- Background in hardware security frameworks and standards, such as NIST SP 800-193, NSA CNSA 2.0, TCG DICE / TPM, or global cybersecurity regulations (e.g., EU CRA).
Compensation
- Salary: USD 132,800 - 259,100 per year (posted range).
- Starting salary range posted: USD 132,800.00 - 185,100.00.
- Applicable full salary ranges by location:
- New York City Metro Area: $154,900.00 - $259,100.00
- Non-Metro New York state & Washington state: $136,500.00 - $228,300.00
Benefits
- Medical, dental and vision insurance
- 401(k) plan with Cisco matching contribution
- Paid parental leave
- Short and long-term disability coverage
- Basic life insurance
- Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time
- 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
- 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
- Non-exempt employees: 16 days of paid vacation time per full calendar year, accrued at 4.92 hours per pay period for full-time employees
- Exempt employees: flexible vacation time off program with no defined limit (subject to availability and some business limitations)
- 80 hours of sick time on hire date and each January 1st thereafter, with up to 80 hours of unused sick time carried forward
- Additional paid time away may be requested to deal with critical or emergency issues for family members
- Optional 10 paid days per full calendar year to volunteer
- For non-sales roles: eligibility to earn annual bonuses subject to Cisco’s policies
- For employees on sales plans: performance-based incentive pay on top of base salary
Application Location / Work Model
- Location: Research Triangle Park, NC (hybrid)
- Onsite requirement: 3 days onsite
U.S. and/or Canada applicants: The starting salary range reflects the projected range for new hires in U.S. and/or Canada locations and does not include incentive compensation, equity, or benefits. Individual pay is determined by hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training.
