Senior Security Engineer
Demandbase1 day ago
Hyderābād, IndiaSenior
Responsibilities
- Own cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and supporting infrastructure.
- Investigate cloud misconfigurations and attack paths, determine actual exposure, prioritize risk, and drive remediation through verified closure.
- Perform security reviews of cloud services, infrastructure designs, network patterns, data flows, and high-risk architecture changes.
- Review Terraform and CI/CD workflows and develop preventive security controls and secure-by-default infrastructure patterns.
- Evaluate AWS IAM, GCP service accounts, workload identity, federation, trust relationships, and privileged access for least privilege.
- Assess Kubernetes RBAC, admission controls, network policies, secrets handling, runtime configurations, and workload isolation.
- Improve security of container images and virtual machines through secure base images, automated upgrades, and vulnerability remediation.
- Triage Wiz and other cloud-security findings, validate exploitability, identify root causes, and reduce recurring security issues.
- Build scripts, integrations, guardrails, dashboards, and automated remediation workflows for cloud-security problems.
- Define and report metrics covering external exposure, IAM risks, Kubernetes issues, unhealthy VMs and container images, remediation aging, and recurrence.
- Support cloud incident investigations through attack-path analysis, evidence collection, blast-radius assessment, containment guidance, and corrective controls.
- Represent Product Security in technical discussions, communicate risk and trade-offs, influence teams without direct authority, mentor engineers, and develop reusable security patterns.
Requirements
- At least 5 years of experience in security, infrastructure, platform engineering, or a related technical field, including at least 4 years of hands-on cloud-security experience.
- Deep practical production experience with AWS and GCP.
- Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
- Hands-on expertise with cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
- Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
- Experience using a CSPM platform such as Wiz to investigate and prioritize risk, with the ability to validate technical impact beyond tool output.
- Ability to automate security workflows using Python, Go, APIs, or similar technologies.
- Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
- Demonstrated ability to independently own ambiguous problems and drive cross-functional remediation to measurable completion.
- Excellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.
- Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.
- Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.
Benefits
- Group medical, personal accident, and term life insurance.
- Preventive healthcare coverage for dental, vision, and OPD needs, plus mental health support.
- Fitness benefit, car lease policy, and gratuity.
Categories
About Demandbase
Demandbase builds a B2B account-based go-to-market platform that unifies account intelligence, intent data, programmatic advertising, and sales intelligence for marketing and sales teams. Delivered as SaaS, it helps companies identify, target, and engage buying groups and measure pipeline impact across the customer lifecycle. Founded in 2005 and headquartered in San Francisco, the company is privately held and serves enterprises pursuing account-based marketing and revenue operations.