Note: The job is a remote job and is open to candidates in USA. Coupa provides an AI-powered total spend management platform that helps businesses make smarter, more profitable decisions. The Senior Security Engineer will own complex security problems end to end by building multi-cloud security controls, automating policy and infrastructure guardrails, remediating vulnerabilities, and supporting incident response. The role also partners with Risk & Compliance and mentors other security engineers.
Responsibilities
- Design and implement multi-cloud security controls across Coupa's cloud environment, including VPC segmentation, security groups/NACLs, IAM policy design using least-privilege and permission boundaries, and Organizations/SCPs for guardrails at scale
- Build policy as code and IaC security guardrails and wire them into CI/CD as pre-merge and pre-deploy gates rather than after-the-fact reviews
- Harden containerized workloads and Kubernetes clusters — image scanning, admission control, pod security standards, network policies, and container/workload runtime detection
- Own vulnerability analysis of application packages, container images, and third-party dependencies; triage findings by exploitability and business impact rather than CVSS score alone
- Design and implement remediations (not just report findings) including secure code fixes, cloud configuration changes, and IAM policy adjustments using least-privilege principles
- Support incident response and forensics as a technical contributor — log analysis, root-cause investigation, and remediation validation using cloud-native and EDR tooling
- Partner with the Risk & Compliance team to provide technical evidence and control validation for audit frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP)
- Support and mentor other security engineers — reviewing designs and remediation plans, sharing root-cause analysis techniques, and helping less experienced teammates work through complex or ambiguous findings
- Participate in the on-call/incident rotation and help continuously improve remediation and response runbooks
Skills
- 5+ years of experience in security engineering or cloud operations, with a track record of independently owning complex assessments from scoping through remediation
- Practical experience with cloud security fundamentals (AWS, GCP, or Azure) — IAM, networking, and common misconfiguration classes — sufficient to both find and fix cloud findings
- Strong scripting/automation skills in Python, Bash, or JavaScript, with experience building or extending internal security tooling
- Experience with dependency/container vulnerability scanning tools and integrating them into CI/CD pipelines
- Working knowledge of common compliance frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP) and what auditable evidence looks like
- Critical thinking and root-cause analysis skills — comfortable digging past a scanner's output to understand and explain why a vulnerability exists
- Clear written and verbal communication skills for translating technical findings into remediation guidance for engineers and risk context for stakeholders
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience
- Relevant certifications a plus: CISSP, CCSP, CISA, or AWS/GCP security certifications
Benefits
- Two designated, company-wide paid wellness days off each year (typically the first Friday in March and the last Friday in September) for all employees globally.
- A paid day off on your birthday or another day of your choice within your birthday month.
- Free, confidential, 24/7/365 Employee Assistance Program (EAP) counseling and resources for emotional support, work-life solutions, financial advice, legal guidance, and support for new parents.
- Zurich Travel Assist business travel protection, including medical, safety, pre-trip planning, and emergency support.
- Monetary referral bonuses when you successfully refer talented friends or acquaintances who are hired into open roles.
- Location-specific benefits packages tailored to your primary work location, including comprehensive medical/dental insurance, retirement/pension plans, and life or accident protection.
Company Overview
Company H1B Sponsorship