Sr Security Engineer - 11816
Coupa Softwareabout 17 hours ago
Base Salary
$83k - $116k/yr
Responsibilities
- Design and implement multi-cloud security controls, including VPC segmentation, security groups/NACLs, IAM policies, permission boundaries, and Organizations/SCP guardrails.
- Build policy-as-code and infrastructure-as-code security guardrails and integrate them into pre-merge and pre-deploy gates.
- Harden containerized workloads and Kubernetes clusters through image scanning, admission control, pod security standards, network policies, and runtime detection.
- Own vulnerability analysis for application packages, container images, and third-party dependencies, prioritizing exploitability and business impact.
- Implement secure code fixes, cloud configuration changes, and least-privilege IAM remediations.
- Support incident response and forensics through log analysis, root-cause investigation, and remediation validation using cloud-native and EDR tooling.
- Partner with Risk & Compliance on technical evidence and control validation for SOC 2, ISO 27001, PCI-DSS, and FedRAMP.
- Mentor security engineers, review designs and remediation plans, participate in the on-call rotation, and improve remediation and response runbooks.
Requirements
- 5+ years of experience in security engineering or cloud operations.
- Experience independently owning complex security assessments from scoping through remediation.
- Practical experience with AWS, GCP, or Azure cloud security, including IAM, networking, and common misconfigurations.
- Strong scripting and automation skills in Python, Bash, or JavaScript.
- Experience with dependency and container vulnerability scanning tools and CI/CD pipeline integration.
- Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP compliance frameworks and auditable evidence.
- Strong critical thinking, root-cause analysis, written communication, and verbal communication skills.
- Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
- CISSP, CCSP, CISA, or AWS/GCP security certifications are preferred.
Benefits
- Two company-wide paid wellness days off annually.
- Paid birthday day off.
- 40 hours of paid volunteer time off annually.
- Free confidential 24/7/365 Employee Assistance Program.
- Business travel protection through Zurich Travel Assist.
- Employee referral bonus program.
- Location-specific medical, dental, retirement or pension, and life or accident protection benefits.
Tech Stack
Categories
About Coupa Software
Coupa is the leader in AI-native total spend management. Using its trusted, community-generated, $8 trillion dataset, Coupa brings autonomous AI agents, a network of 10M+ buyers and suppliers, and leading apps together on one unified platform to seamlessly automate the buying process and connect to customers in a whole new way. With Coupa, you’ll make margins multiply™.