Lead Security Engineer

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coupa Software

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2006

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Coupa Software is a leading provider of business spend management solutions. Their platform focuses on optimizing and transforming direct and indirect spend across procurement, finance, supply chain, and IT. Coupa leverages AI and extensive data insights to drive cost efficiencies, manage supplier relationships, and mitigate risks. With products covering areas such as invoicing, payments, expense management, and supply chain collaboration, Coupa serves a wide range of industries including automotive, healthcare, retail, and more. Their comprehensive community and partner ecosystem enable organizations to unlock hidden savings and improve compliance, promoting growth and resilience in a changing economic climate.

📋 Description

• Architect and build multi-cloud security controls across Coupa's cloud environment, including VPC segmentation, security groups/NACLs, IAM policy design, and Organizations/SCPs guardrails • Build policy-as-code and IaC security guardrails and integrate them into CI/CD pre-merge and pre-deploy gates • Harden containerized workloads through image scanning, admission control, pod security standards, and runtime detection • Write auto-remediation for cloud misconfiguration and drift • Own the vulnerability management program and serve as the technical escalation point for security incidents and vulnerability findings • Lead forensics, containment, root-cause analysis, and remediation using cloud-native and EDR tooling • Partner with Risk & Compliance to translate SOC 2, ISO 27001, PCI-DSS, and FedRAMP requirements into technical controls • Automate evidence collection by integrating cloud telemetry with GRC tooling • Mentor security engineers through design review, threat modeling, and code/architecture review • Own reference architectures, threat models, and runbooks; participate in and improve the on-call rotation

🎯 Requirements

• 10+ years of security engineering experience, including hands-on experience securing production cloud environments at scale • Experience leading projects or mentoring engineers • Deep hands-on AWS security expertise across IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs • Working knowledge of GCP or Azure security • Production experience with Terraform or equivalent IaC and policy-as-code frameworks • Container/Kubernetes security tooling experience • Strong software engineering fundamentals, including Python and/or Go • Git-based workflow experience • Experience building and maintaining CI/CD security integrations, including SAST, DAST, and SCA • Experience with SIEM/SOAR platforms and vulnerability management tooling such as Wiz, Qualys, or Tenable • Working knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53 • Excellent written and verbal communication skills • Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience • Some international travel may be required

🏖️ Benefits

• Two company-wide paid wellness days off each year • Paid day off on your birthday or another day of your choice within your birthday month • 40 hours of paid volunteer time off annually • Free, confidential, 24/7/365 Employee Assistance Program • Business travel protection through Zurich Travel Assist • Monetary referral bonuses for successful hires • Location-specific medical/dental insurance • Retirement/pension plans • Life or accident protection