Sr Security Engineer - 11924
Coupa Software5 days ago
Pune, IndiaSenior
Responsibilities
- Design and implement multi-cloud security controls involving VPC segmentation, security groups/NACLs, IAM policies, permission boundaries, Organizations, and SCPs.
- Build policy-as-code and IaC security guardrails and integrate them into CI/CD pre-merge and pre-deploy gates.
- Harden containerized workloads and Kubernetes clusters through image scanning, admission control, pod security standards, network policies, and runtime detection.
- Own vulnerability analysis for application packages, container images, and third-party dependencies, and prioritize findings by exploitability and business impact.
- Implement secure code fixes, cloud configuration changes, and least-privilege IAM remediations.
- Support incident response and forensics through log analysis, root-cause investigation, and remediation validation using cloud-native and EDR tooling.
- Provide technical evidence and control validation for compliance audits and frameworks.
- Mentor security engineers, review designs and remediation plans, and improve incident response runbooks while participating in the on-call rotation.
Requirements
- 5+ years of experience in security engineering or cloud operations with independent ownership of complex assessments through remediation.
- Practical security experience with AWS, GCP, or Azure, including IAM, networking, and common cloud misconfigurations.
- Strong scripting and automation skills in Python, Bash, or JavaScript, including experience building or extending internal security tooling.
- Experience with dependency and container vulnerability scanning tools and CI/CD pipeline integration.
- Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP and the evidence required for audits.
- Strong critical thinking, root-cause analysis, written communication, and verbal communication skills.
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
- CISSP, CCSP, CISA, or AWS/GCP security certifications are a plus.
Benefits
- Two company-wide paid wellness days each year.
- One paid birthday day off each year.
- 40 hours of paid volunteer time off annually.
- Free, confidential 24/7/365 employee assistance and counseling resources.
- Business travel protection through Zurich Travel Assist.
- Employee referral bonus program.
- Location-specific benefits may include medical and dental insurance, retirement or pension plans, and life or accident protection.
Tech Stack
Categories
About Coupa Software
Coupa Software provides a cloud-based spend management platform used by enterprises to manage procurement, sourcing, invoicing, and supplier interactions. It sells SaaS subscriptions and services that help finance and operations teams control and analyze business spending across a large buyer–supplier network. Founded in 2006 and headquartered in Foster City, California, Coupa is privately held under Thoma Bravo ownership and serves global customers across many industries.