Sr Security Engineer - 11924

4 hours, 4 minutes ago
Full-time
Senior
Cybersecurity
Coupa Software

Coupa Software

Coupa Software is the premier cloud-based finance platform, empowering companies worldwide to optimize spend, boost profits, and reduce costs with a comprehensive suite of modules.

Internet Software & Services
1001-5000
Founded 2006

Description

  • Design and implement multi-cloud security controls, including network segmentation, IAM policies, permission boundaries, and organization-level guardrails.
  • Build policy-as-code and infrastructure-as-code security guardrails integrated into CI/CD pre-merge and pre-deployment gates.
  • Harden containerized workloads and Kubernetes clusters through image scanning, admission controls, pod security standards, network policies, and runtime detection.
  • Own vulnerability analysis for application packages, container images, and third-party dependencies, prioritizing findings by exploitability and business impact.
  • Design and implement remediations, including secure code fixes, cloud configuration changes, and least-privilege IAM adjustments.
  • Support incident response and forensics through log analysis, root-cause investigations, and remediation validation.
  • Provide technical evidence and control validation for SOC 2, ISO 27001, PCI-DSS, and FedRAMP audits.
  • Mentor security engineers by reviewing designs and remediation plans and sharing root-cause analysis practices.
  • Participate in the on-call incident rotation and improve remediation and response runbooks.

Requirements

  • 5+ years of security engineering or cloud operations experience, including ownership of complex assessments from scoping through remediation.
  • Practical cloud security experience with AWS, GCP, or Azure, including IAM, networking, and common misconfigurations.
  • Strong scripting and automation skills in Python, Bash, or JavaScript.
  • Experience building or extending internal security tooling.
  • Experience with dependency and container vulnerability scanning tools and CI/CD integrations.
  • Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP compliance frameworks and auditable evidence requirements.
  • Strong critical-thinking and root-cause analysis skills for investigating vulnerabilities beyond scanner output.
  • Clear written and verbal communication skills for providing remediation guidance and risk context.
  • Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
  • CISSP, CCSP, CISA, or AWS/GCP security certifications are preferred.

Benefits

  • Two company-wide paid wellness days each year.
  • Paid birthday time off during the employee's birthday month.
  • 40 hours of paid volunteer time off annually.
  • Free, confidential 24/7 employee assistance program with counseling, financial, legal, and new-parent support.
  • Business travel medical, safety, planning, and emergency support.
  • Monetary employee referral bonuses.
  • Location-specific benefits, including medical and dental insurance, retirement or pension plans, and life or accident protection.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Engineer - SecOps & Cloud

Swapcard 201-500 Professional Services

Swapcard is hiring a Security Engineer to strengthen cloud, endpoint, and application security for its remote-first AI-powered event platform.

AWS CI/CD Helm Kubernetes Terraform
3 hours, 34 minutes ago

Cloud / M365 Security Engineer

Spektrum Group 1-10 Professional Services

Spektrum is seeking a Cloud / M365 Security Engineer to secure, monitor, and strengthen Microsoft 365 and cloud environments supporting NATO mission-critical digital capabilities.

AWS SIEM
4 hours, 4 minutes ago

Staff Security Engineer (Top Secret Clearance Required)

Orbis 11-50 Professional Services

Orbis is seeking a Staff Security Engineer to define and lead the security architecture for Catalyst, a secure multi-cluster service mesh platform supporting U.S. government and allied missions.

Go gRPC HashiCorp Vault OpenID Connect OWASP Penetration Testing SAML TLS
4 hours, 4 minutes ago

Security Engineer

Kyivstar 1001-5000 Wireless Telecommunication Services

Kyivstar.Tech is seeking a Cyber Security specialist to design and implement cloud infrastructure and corporate data protection solutions.

AWS Azure Cybersecurity GCP PowerShell Python Secrets Management
4 hours, 4 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers