Senior Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Design and implement multi-cloud security controls across Coupa’s cloud infrastructure.

• Craft VPC segmentation, establish security groups/NACLs, and develop IAM policies adhering to least privilege and permission boundaries, as well as Organizations/SCPs guardrails.

• Develop policy-as-code and infrastructure as code (IaC) security guardrails, integrating them into CI/CD pre-merge and pre-deploy checkpoints.

• Strengthen containerized workloads via image scanning, admission control, pod security standards, and runtime detection.

• Create automated solutions for cloud misconfigurations and drift remediation.

• Manage the vulnerability management program.

• Act as a technical escalation point for security incidents and vulnerability assessments.

• Lead forensic investigations, containment efforts, root-cause analysis, and remediation utilizing cloud-native and EDR tools.

• Collaborate with the Risk & Compliance team to convert audit requirements into technical controls and automate the evidence collection process.

• Guide and mentor security engineers through design reviews, threat modeling, and code/architecture evaluations.

• Maintain reference architectures, threat models, and operational runbooks.

• Engage in and enhance the on-call rotation process.

⛳️ Requirements

• Over 10 years of experience in security engineering, with substantial hands-on experience in securing large-scale production cloud environments.

• Proven experience in leading projects or mentoring fellow engineers.

• Extensive hands-on expertise in AWS security, including IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs.

• Familiarity with GCP or Azure security is advantageous.

• Practical experience with Terraform or equivalent infrastructure as code (IaC) and policy-as-code frameworks.

• Experience with container and Kubernetes security tools.

• Strong foundational skills in software engineering, including proficiency in Python and/or Go, Git-based workflows, and CI/CD security integrations.

• Knowledge of SAST, DAST, and SCA methodologies.

• Experience with SIEM/SOAR platforms and vulnerability management tools such as Wiz, Qualys, or Tenable.

• Understanding of SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53 standards.

• Exceptional written and verbal communication abilities.

• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.

• Certifications such as CISSP, CCSP, CISA, or AWS/GCP security certifications are advantageous.

• Some international travel may be necessary.

🏝️ Benefits

• Two designated paid wellness days off for all employees each year.

• A paid day off on the employee’s birthday or another day within their birthday month.

• 40 hours of paid Volunteer Time Off each year.

• Access to a free, confidential, 24/7/365 Employee Assistance Program for counseling and resources.

• Business travel protection through Zurich Travel Assist, covering medical, safety, pre-trip planning, and emergency support.

• Financial referral bonuses for successful candidate referrals.

• Comprehensive medical and dental insurance specific to the location.

• Location-specific retirement or pension plans.

• Location-specific life or accident protection.

• A collaborative culture and a work environment that focuses on global impact.