Sr Security Engineer - 11917

4 hours, 3 minutes ago
Full-time
Lead
Cybersecurity
Coupa Software

Coupa Software

Coupa Software is the premier cloud-based finance platform, empowering companies worldwide to optimize spend, boost profits, and reduce costs with a comprehensive suite of modules.

Internet Software & Services
1001-5000
Founded 2006

Description

  • Architect and build multi-cloud security controls, including network segmentation, IAM, least-privilege policies, and organization-level guardrails.
  • Develop policy-as-code and infrastructure-as-code security guardrails integrated into CI/CD pre-merge and pre-deployment gates.
  • Harden containerized workloads through image scanning, admission control, pod security standards, and runtime detection.
  • Create automated remediation for cloud misconfigurations and configuration drift.
  • Own the vulnerability management program and lead technical escalation for security incidents and vulnerability findings.
  • Conduct forensics, containment, root-cause analysis, and remediation using cloud-native and EDR tools.
  • Translate SOC 2, ISO 27001, PCI-DSS, and FedRAMP requirements into technical controls and automate audit evidence collection.
  • Mentor security engineers through design reviews, threat modeling, and code and architecture reviews.
  • Own security-tooling reference architectures, threat models, and runbooks; contribute to the on-call rotation.

Requirements

  • 10+ years of security engineering experience, including hands-on security work in production cloud environments at scale.
  • Experience leading security projects or mentoring engineers.
  • Deep AWS security expertise, including IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs.
  • Working knowledge of GCP or Azure security (preferred).
  • Production experience with Terraform or equivalent infrastructure-as-code tools, policy-as-code frameworks, and container/Kubernetes security tooling.
  • Strong software engineering skills in Python and/or Go, Git-based workflows, and CI/CD security integrations such as SAST, DAST, and SCA.
  • Experience with SIEM/SOAR and vulnerability management tools such as Wiz, Qualys, or Tenable, including building detections and workflows.
  • Working knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53.
  • Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
  • CISSP, CCSP, CISA, or AWS/GCP security certifications (preferred); willingness to travel internationally as needed.

Benefits

  • Two company-wide paid wellness days each year.
  • Paid birthday time off during your birthday month.
  • 40 hours of paid volunteer time off annually.
  • Free, confidential 24/7 Employee Assistance Program counseling and support resources.
  • Business travel medical, safety, planning, and emergency support.
  • Monetary employee referral bonuses.
  • Location-specific medical, dental, retirement/pension, and life or accident insurance benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Engineer - SecOps & Cloud

Swapcard 201-500 Professional Services

Swapcard is hiring a Security Engineer to strengthen cloud, endpoint, and application security for its remote-first AI-powered event platform.

AWS CI/CD Helm Kubernetes Terraform
3 hours, 33 minutes ago

Cloud / M365 Security Engineer

Spektrum Group 1-10 Professional Services

Spektrum is seeking a Cloud / M365 Security Engineer to secure, monitor, and strengthen Microsoft 365 and cloud environments supporting NATO mission-critical digital capabilities.

AWS SIEM
4 hours, 3 minutes ago

Staff Security Engineer (Top Secret Clearance Required)

Orbis 11-50 Professional Services

Orbis is seeking a Staff Security Engineer to define and lead the security architecture for Catalyst, a secure multi-cluster service mesh platform supporting U.S. government and allied missions.

Go gRPC HashiCorp Vault OpenID Connect OWASP Penetration Testing SAML TLS
4 hours, 3 minutes ago

Security Engineer

Kyivstar 1001-5000 Wireless Telecommunication Services

Kyivstar.Tech is seeking a Cyber Security specialist to design and implement cloud infrastructure and corporate data protection solutions.

AWS Azure Cybersecurity GCP PowerShell Python Secrets Management
4 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers