Sr Security Engineer - Red Team - 11817

6 hours ago
Full-time
Senior
Artificial Intelligence and Machine Learning
Coupa Software

Coupa Software

Coupa Software is the premier cloud-based finance platform, empowering companies worldwide to optimize spend, boost profits, and reduce costs with a comprehensive suite of modules.

Internet Software & Services
1K-5K
Founded 2006

Description

  • Execute sophisticated penetration tests and red team exercises.
  • Develop new attack techniques and testing methodologies.
  • Test internally and externally hosted web apps, mobile apps, AI/LLM systems, and APIs.
  • Perform specialized security assessments targeting prompt injection, jailbreaking, data poisoning, and model evasion.
  • Develop, deploy, and manage AI agents for continuous security testing and vulnerability discovery.
  • Identify network and system vulnerabilities and recommend countermeasures and mitigating controls.
  • Perform penetration testing, remediation testing, and reporting in a fast-paced technical environment.
  • Guide development teams on secure coding best practices, including security for AI/ML models.
  • Serve as an escalation point during critical security incidents and lead root-cause analysis and threat hunting.
  • Maintain and extend application security tooling, standards, and processes such as SAST, DAST, WAF, and AI-based security platforms.

Requirements

  • 3-8 years of experience in an equivalent security-related role with hands-on AI-driven security testing experience.
  • Bachelor's or Master's degree in Computer Science, or equivalent experience.
  • Hands-on experience developing or using autonomous, agentic systems for security penetration testing.
  • Strong experience in web and API security, including testing and defending AI/ML systems.
  • Familiarity with cloud environments such as AWS, Azure, or GCP.
  • Hands-on experience managing bug bounty programs.
  • Proficiency in one or more scripting languages, with a strong preference for Python.
  • Knowledge of OWASP Top 10, SANS Top 25, and OWASP Top 10 for Large Language Models.
  • Familiarity with pentest standards and frameworks such as PTES, OSSTMM, NIST, OSINT, and OWASP.
  • Relevant security certifications such as CEH, OSCP, GPEN, LPT, or EWPTX are a plus.
  • Ability to translate technical security findings into business risk for non-technical and executive stakeholders.
  • Ability to work effectively in a team environment.

Benefits

  • Two company-wide paid Global Wellness Days each year.
  • Paid birthday time off during your birthday month.
  • 40 hours of paid Volunteer Time Off annually.
  • 24/7/365 Employee Assistance Program with counseling and support resources.
  • Business travel protection through Zurich Travel Assist.
  • Generous referral bonus program.
  • Competitive location-specific benefits, including medical/dental insurance, retirement/pension plans, and life or accident protection.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lead Traveling Security Technician

Unlimited Technology 51-250 Professional Services

Unlimited Technology is hiring a Traveling Security Technician for UT Government to install, service, test, and inspect access control and IP camera systems for customers across the U.S.

5 hours, 45 minutes ago

Identity Management Engineer / Architect (R-00197)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an Identity Management Engineer / Architect to design and operate a secure enterprise identity platform across on-premises, cloud, SaaS, and hybrid environments in support of Zero Trust and regulated government use cases.

Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
5 hours, 45 minutes ago

Staff Vulnerability Management Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Staff Vulnerability Management Engineer to lead its AI-driven open source vulnerability disclosure and coordination efforts across internal teams, maintainers, and industry stakeholders.

Go Java JavaScript Penetration Testing Python
5 hours, 45 minutes ago

PKI / Certificate Management Engineer (R-00198)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring a PKI / Certificate Management Engineer to design and operate enterprise certificate infrastructure across cloud, government, and hybrid environments.

Encryption Linux TLS
5 hours, 45 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers