2 months ago
Hyderābād, IndiaSenior
Responsibilities
- Lead the maturity of Yext’s Cloud and Enterprise Security programs by identifying infrastructure gaps and developing automated solutions.
- Design, deploy, and maintain immutable cloud security controls across AWS and GCP using Infrastructure as Code.
- Define, implement, and monitor security baselines for Docker container workloads and Kubernetes orchestration platforms.
- Integrate SAST, DAST, dependency, and secret scanning into engineering deployment pipelines.
- Oversee cloud vulnerability scanning, risk prioritization, and remediation coordination across engineering teams.
- Lead cloud-native security architecture reviews and threat modeling sessions.
- Author and contribute to cloud security policies, procedures, and standards.
- Map technical controls to SOC2 and ISO 27001 compliance frameworks.
- Support security incident response and promote security awareness and DevSecOps practices.
Requirements
- 6+ years of relevant experience in Cloud Security Engineering or Product Security.
- Hands-on experience managing security controls in AWS and/or GCP environments.
- Experience with Terraform, CloudFormation, or Pulumi for secure infrastructure deployment and management.
- Practical experience securing Kubernetes environments, managing network policies, and scanning container images.
- Proficiency in security automation using Python, Go, PowerShell, or Bash.
- Familiarity with NIST, ISO 27001, or CIS benchmarks.
- Strong communication and collaboration skills with Engineering, IT, and Product stakeholders.
- Preferred: understanding of centralized logging, SIEM platforms, and anomaly analysis.
- Preferred: practical cloud DFIR knowledge and advanced MITRE ATT&CK application.
- Preferred: CCSP, AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, or equivalent certification.
Tech Stack
Categories
About Yext
Yext builds an enterprise platform for managing digital presence and search across listings, reviews, local pages, and site experiences, with an API-first architecture for developers. It sells SaaS subscriptions to multi-location brands and partners in retail, healthcare, financial services, hospitality, and food to manage and measure visibility across AI and traditional search. Founded in 2006 and headquartered in New York, Yext is a public company on the NYSE (YEXT).