Senior Security Engineer

• Design and implement multi-cloud security controls across Coupa's cloud environment
• Implement VPC segmentation, security groups/NACLs, IAM least-privilege policies and permission boundaries, and Organizations/SCP guardrails
• Build policy-as-code and infrastructure-as-code security guardrails integrated into CI/CD pre-merge and pre-deploy gates
• Harden containerized workloads and Kubernetes clusters through image scanning, admission control, pod security standards, network policies, and runtime detection
• Own vulnerability analysis for application packages, container images, and third-party dependencies
• Design and implement secure code, cloud configuration, and IAM remediations
• Support incident response and forensics through log analysis, root-cause investigation, and remediation validation
• Partner with Risk & Compliance on technical evidence and control validation for SOC 2, ISO 27001, PCI-DSS, and FedRAMP audits
• Support and mentor other security engineers through design and remediation reviews
• Participate in the on-call/incident rotation and improve remediation and response runbooks

• 5+ years of experience in security engineering or cloud operations
• Experience independently owning complex security assessments from scoping through remediation
• Practical cloud security experience with AWS, GCP, or Azure, including IAM, networking, and common misconfiguration classes
• Strong scripting and automation skills in Python, Bash, or JavaScript
• Experience with dependency and container vulnerability scanning tools and CI/CD integration
• Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP
• Critical thinking and root-cause analysis skills for investigating vulnerabilities
• Clear written and verbal communication skills for translating technical findings and remediation guidance
• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience
• CISSP, CCSP, CISA, or AWS/GCP security certifications are a plus

• Two company-wide paid wellness days off each year
• Paid day off on your birthday or another day of your choice within your birthday month
• 40 hours of paid Volunteer Time Off annually
• Free, confidential, 24/7/365 Employee Assistance Program with counseling and work-life, financial, legal, and new-parent support
• Zurich Travel Assist business travel protection, including medical, safety, pre-trip planning, and emergency support
• Monetary referral bonuses for successful employee referrals
• Location-specific comprehensive medical and dental insurance
• Location-specific retirement/pension plans
• Location-specific life or accident protection