Senior Security Engineer

• Architect and build multi-cloud security controls across Coupa’s cloud environment
• Design VPC segmentation, security groups/NACLs, IAM policies using least privilege and permission boundaries, and Organizations/SCPs guardrails
• Build policy-as-code and IaC security guardrails and integrate them into CI/CD pre-merge and pre-deploy gates
• Harden containerized workloads through image scanning, admission control, pod security standards, and runtime detection
• Create automated remediation for cloud misconfiguration and drift
• Own the vulnerability management program
• Serve as technical escalation point for security incidents and vulnerability findings
• Lead forensics, containment, root-cause analysis, and remediation using cloud-native and EDR tooling
• Partner with Risk & Compliance to translate audit requirements into technical controls and automate evidence collection
• Mentor security engineers through design review, threat modeling, and code/architecture review
• Own reference architectures, threat models, and runbooks
• Participate in and help improve the on-call rotation

• 10+ years of security engineering experience, including significant hands-on experience securing production cloud environments at scale
• Experience leading projects or mentoring other engineers
• Deep hands-on AWS security expertise, including IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs
• Working knowledge of GCP or Azure security is a plus
• Production experience with Terraform or equivalent IaC and policy-as-code frameworks
• Container/Kubernetes security tooling experience
• Strong software engineering fundamentals, including Python and/or Go, Git-based workflows, and CI/CD security integrations
• Experience with SAST, DAST, and SCA
• Experience with SIEM/SOAR platforms and vulnerability management tooling such as Wiz, Qualys, or Tenable
• Working knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53
• Excellent written and verbal communication skills
• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience
• CISSP, CCSP, CISA, or AWS/GCP security certifications are a plus
• Some international travel may be required

• Two designated company-wide paid wellness days off each year
• Paid day off on the employee’s birthday or another day within the birthday month
• 40 hours of paid Volunteer Time Off annually
• Free, confidential, 24/7/365 Employee Assistance Program counseling and resources
• Business travel protection through Zurich Travel Assist, including medical, safety, pre-trip planning, and emergency support
• Monetary referral bonuses for successful referrals
• Location-specific comprehensive medical/dental insurance
• Location-specific retirement/pension plans
• Location-specific life or accident protection
• Collaborative culture and global-impact work environment