Security Engineer III
CommerceIQ3 days ago
Bengaluru, IndiaSenior
Responsibilities
- Secure AWS and GCP environments through IAM, network security, encryption, logging, and access controls.
- Perform application security reviews, vulnerability assessments, penetration-testing coordination, and remediation tracking.
- Integrate SAST, DAST, dependency, container, and infrastructure-as-code scanning into CI/CD pipelines.
- Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
- Improve threat detection, security logging, alerting, incident response, and investigation processes.
- Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
- Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
- Build scripts and tools to automate security checks, reporting, and remediation.
- Investigate security incidents, perform root-cause analysis, and implement preventive measures.
- Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.
Requirements
- 6–10 years of experience in information security, cloud security, application security, or DevSecOps.
- Strong hands-on experience with AWS and/or GCP security.
- Understanding of IAM, least-privilege access, secrets management, encryption, and network security.
- Experience integrating security tools into CI/CD pipelines.
- Familiarity with SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent tools.
- Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
- Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
- Experience with vulnerability management, security incident response, and risk assessment.
- Scripting skills in Python, Bash, or similar languages.
- Understanding of SOC 2 or ISO 27001 requirements.
Benefits
- Equal opportunity employer that values diversity and prohibits discrimination on protected grounds.
Tech Stack
Categories
About CommerceIQ
CommerceIQ builds an AI-driven ecommerce management platform used by consumer and retail brands to optimize retail media, digital shelf content, pricing, availability, and supply chain on major online marketplaces and retailers. It sells its software as a SaaS platform with automation and agent-based workflows for marketing, sales, and operations teams. The company is privately held, founded in 2012, headquartered in Mountain View, California, and raised a Series D in 2022.