Lead Security Engineer - 11807

3 days, 16 hours ago
Full-time
Lead
DevOps and Infrastructure
Coupa Software

Coupa Software

Coupa Software is the premier cloud-based finance platform, empowering companies worldwide to optimize spend, boost profits, and reduce costs with a comprehensive suite of modules.

Internet Software & Services
1K-5K
Founded 2006

Description

  • Architect and build multi-cloud security controls across Coupa’s cloud environment.
  • Design and implement policy-as-code and infrastructure-as-code security guardrails in CI/CD pipelines.
  • Harden containerized workloads through scanning, admission control, pod security standards, and runtime detection.
  • Develop auto-remediation for cloud misconfigurations and configuration drift.
  • Own the vulnerability management program and serve as the technical escalation point for security incidents and findings.
  • Lead forensics, containment, root-cause analysis, and remediation using cloud-native and EDR tooling.
  • Partner with Risk and Compliance to translate audit requirements into technical controls and automate evidence collection.
  • Mentor security engineers through design review, threat modeling, and code or architecture review.
  • Own reference architectures, threat models, and runbooks for security tooling and improve the on-call rotation.

Requirements

  • 10+ years of security engineering experience, including hands-on work securing production cloud environments at scale.
  • Experience leading projects or mentoring other engineers.
  • Deep hands-on AWS security expertise, including IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs.
  • Working knowledge of GCP or Azure security is a plus.
  • Production experience with Terraform or equivalent IaC and policy-as-code frameworks.
  • Experience with container and Kubernetes security tooling.
  • Strong software engineering fundamentals with Python and/or Go, Git-based workflows, and CI/CD security integrations such as SAST, DAST, and SCA.
  • Experience with SIEM/SOAR platforms and vulnerability management tools such as Wiz, Qualys, or Tenable.
  • Working knowledge of compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53.
  • Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
  • Relevant certifications such as CISSP, CCSP, CISA, or AWS/GCP security certifications are a plus.
  • Some international travel may be required.

Benefits

  • Two company-wide paid Global Wellness Days each year.
  • Paid birthday time off.
  • 40 hours of paid Volunteer Time Off annually.
  • Free, confidential 24/7 Employee Assistance Program support.
  • Business travel protection through Zurich Travel Assist.
  • Generous referral bonus program.
  • Location-specific benefits including comprehensive medical and dental insurance, retirement or pension plans, and life or accident protection.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Engineer

Hummingbird 1K-5K Professional Services

Hummingbird is hiring a Senior Security Engineer to own and strengthen security for its remote-first SaaS platform that helps financial institutions fight financial crime.

AWS Azure CircleCI Docker Encryption GraphQL JavaScript Network Security PostgreSQL Python React Redis Ruby Ruby on Rails Terraform TypeScript
1 day, 15 hours ago

Principal IAM Engineer Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote Principal IAM Engineer Consultant to lead engineering design and delivery for a customer identity and access management platform in a highly regulated financial services environment.

DevSecOps Microservices REST API SAML
2 days, 15 hours ago

Senior Security Research Engineer

PlayStation 100K+ Household Durables

Sony Interactive Entertainment is hiring a Senior Security Research Engineer to lead Global Vulnerability Management efforts that advance its Threat Exposure Management program and strengthen security risk reduction across the PlayStation ecosystem.

Bash CI/CD Domo Git JavaScript PowerShell Python Snowflake SQL
2 days, 16 hours ago

Senior Capabilities Developer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Capabilities Developer to build and maintain the Synapse-based threat intelligence infrastructure that powers analysis and reporting for critical infrastructure cybersecurity.

2 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers