Cisco Certified DevNet Specialist - Security Automation and Programmability

300-735 · ● Active · Specialist · Cisco

Automating and Programming Cisco Security Solutions (SAUTO). A 90-minute exam validating knowledge of security automation, RESTful APIs, threat defense, cloud security, and ISE configuration. Earns the Cisco Certified DevNet Specialist credential and counts as a concentration exam for CCNP Security and Cisco Certified DevNet Professional.

Exam facts

Vendor source — Cisco Learning: SAUTO 300-735 ↗

Official exam guide — Automating Cisco Security Solutions v1.1 (PDF) ↗

Exam objectives — SAUTO Exam Topics (Cisco Learning Network) ↗

Registration — Pearson VUE Cisco Exams ↗

About

The Cisco Certified DevNet Specialist - Security Automation and Programmability (SAUTO 300-735) is a specialized certification launched in 2019 that validates hands-on expertise in implementing security automated solutions using Cisco platforms. The exam tests candidates on network programmability foundations (10% weight), network security automation (35%), advanced threat and endpoint security (30%), and cloud, web, and email security APIs (25%). Released in v1.1 as of 2024, it serves as a concentration exam for both the CCNP Security and Cisco Certified DevNet Professional career tracks, targeting security engineers and network programmers who work at the intersection of DevOps culture and security operations.

Domain context

Security Concepts & Network Security Programmability — Vendor-specific expertise in automating Cisco security infrastructure (firewalls, ISE, Umbrella, Secure Endpoint) via RESTful APIs and programmatic interfaces. Also includes Cisco SecureX/XDR cloud security orchestration.

Read full deep dive — Cisco Ecosystem Overview ↗

Topics covered

Exam blueprint topics and approximate weights (per official exam guide):

• Network Programmability Foundation (10%): Programming basics (Python, REST), data models (YANG), protocols (NETCONF, RESTCONF), APIs, authentication/authorization, JSON/XML
• Network Security (35%): Firewall automation (ASA, Firepower), intrusion prevention (Snort), configuration management, device hardening, access control policy automation
• Advanced Threat & Endpoint Security (30%): Cisco Secure Endpoint (AMP) API, Cisco Threat Grid, threat hunting automation, endpoint detection & response (EDR) integration, incident response workflows
• Cloud, Web & Email Security (25%): Cisco Umbrella DNS filtering API, web proxy (WSA) automation, email security (ESA), Secure Cloud Access architecture, SecureX/XDR platform orchestration

Source: Official Exam Topics v1.1 ↗

Common skills at Security · Specialist level

Shared content for Network Security automation at Specialist level — not specific to this cert.

• Designing security automation workflows using APIs and webhooks
• Integrating third-party threat intelligence with security appliances
• Orchestrating incident response using SOAR / XDR platforms
• Writing Python scripts for network device configuration and monitoring
• Understanding OAuth 2.0, API key management, and secure credential storage
• Deploying and managing containerized security services (Docker, Kubernetes basics)
• Analyzing security telemetry at scale (metrics, logs, alerts)
• Building automation for compliance reporting and policy audit trails

Recommended courses at Security · Specialist level

Course-selection rule: Choose courses labeling the SAUTO exam code or v1.1 specifically. Avoid generic "Cisco security" paths unless they explicitly cover this exam's topics.

Practice exams

Books

Note: No SAUTO 300-735 specific study guide has been published by Cisco Press as of May 2026. The two titles above cover the underlying network programmability and security automation concepts tested on the exam. Check Cisco Learning Network for links to vendor-written exam preparation materials.

Typical job titles at Security · Specialist level

Security Automation Engineer · Security Operations Engineer · DevSecOps Engineer · Cloud Security Engineer · Threat Automation Specialist · Security API Developer · SOC Automation Analyst

(Job titles drawn from current job-board postings listing SAUTO or DevNet Specialist credentials as required or preferred.)

Salary

Salary note: USD range is median for "Security Automation Engineer" roles requiring this cert or equivalent DevNet credential. ZAR estimated from "Cyber Security Engineer" and "Cisco CCNP" salary surveys; region-specific SAUTO salary data unavailable. GBP combines UK "Security Engineer" and "Automation Engineer" market data. Actual compensation varies widely by employer, location, cloud provider experience, and incident response exposure.

Skills validated

This exam tests hands-on, verifiable competencies distinct from general security knowledge.

• Cisco ASA / Firepower configuration via REST API
• Cisco Identity Services Engine (ISE) API integration and policy automation
• Cisco Secure Endpoint (AMP) threat intelligence API usage
• Cisco Umbrella DNS API for dynamic policy and reporting
• Cisco SecureX / XDR API for threat correlation and orchestration
• RESTful API design patterns (OAuth, API keys, rate limiting)
• Python scripting for security device automation (requests library, JSON parsing)
• Webhook and syslog event automation for SOC alerting
• Container security basics (Cisco Secure Container Image Scanning)
• Threat hunting and incident response workflow automation

Related certifications

• Stacks with: Cisco CCNP Security (350-401) ↗ | Cisco Certified DevNet Professional (400-007) ↗
• Adjacent DevNet specs: [Cisco DevNet Specialist Cloud (300-740) ↗]({file not yet created}) | [Cisco DevNet Specialist SD-WAN (300-415) ↗]({file not yet created})
• Prerequisite knowledge: CCNP Security core (networking, threat defense) or equivalent hands-on experience
• Vendor overview: Cisco Vendor Overview ↗

Sources

• Cisco Learning: SAUTO 300-735 exam page: https://www.cisco.com/site/us/en/learn/training-certifications/exams/sauto.html
• Official exam topics v1.1 PDF: https://learningcontent.cisco.com/documents/marketing/exam-topics/300-735-SAUTO-v1.1.pdf
• Cisco Learning Network — SAUTO exam topics: https://learningnetwork.cisco.com/s/sauto-exam-topics
• Pearson VUE Cisco Exams: https://www.pearsonvue.com/us/en/cisco.html
• Cisco exam registration guide: https://www.cisco.com/site/us/en/learn/training-certifications/exams/registration.html
• Pluralsight SAUTO learning paths: https://www.pluralsight.com/paths/cisco-sauto-300-375-for-ccnp-security-and-cisco-certified-devnet-professional
• Udemy SAUTO course: https://www.udemy.com/course/300-735-sauto-automating-and-programming-security-solutions/
• Firebrand Training — DevNet Specialist SAUTO: https://firebrand.training/en/courses/cisco/certified-devnet-specialist-security-automation-programmability-certification
• Cisco Press — Network Programmability and Automation Fundamentals: https://www.ciscopress.com/store/network-programmability-and-automation-fundamentals-9780135183656
• Cisco Press — Programming and Automating Cisco Networks: https://www.ciscopress.com/store/programming-and-automating-cisco-networks-a-guide-to-9781587144653
• Glassdoor — Security Automation Engineer salary: https://www.glassdoor.com/Salaries/security-automation-engineer-salary-SRCH_KO0,28.htm
• ZipRecruiter — Security Automation Engineer salary: https://www.ziprecruiter.com/Salaries/Security-Automation-Engineer-Salary
• PayScale ZA — Cyber Security Engineer: https://www.payscale.com/research/ZA/Job=Cyber_Security_Engineer/Salary
• School of IT — Cisco salary in South Africa: https://www.schoolofit.co.za/cisco-salary-in-south-africa/
• IT Jobs Watch — Security Engineer salary UK: https://www.itjobswatch.co.uk/jobs/uk/security%20engineer.do
• Glassdoor UK — Cyber Security Engineer salary: https://www.glassdoor.co.uk/Salaries/cyber-security-engineer-salary-SRCH_KO0,23.htm
• NWExam — 300-735 SAUTO practice questions: https://www.nwexam.com/cisco/300-735-automating-and-programming-cisco-security-solutions-sauto
• ExamTopics — Free SAUTO exam questions: https://www.examtopics.com/exams/cisco/300-735/
• MeasureUp official practice exams: https://www.measureup.com/

Last verified: 2026-05-01

Parent ecosystem: Cisco Ecosystem ↗

Parent domain: Security Concepts ↗

Vendor overview: Cisco ↗