Senior Security Engineer

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coupa Software

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2006

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Coupa Software is a leading provider of business spend management solutions. Their platform focuses on optimizing and transforming direct and indirect spend across procurement, finance, supply chain, and IT. Coupa leverages AI and extensive data insights to drive cost efficiencies, manage supplier relationships, and mitigate risks. With products covering areas such as invoicing, payments, expense management, and supply chain collaboration, Coupa serves a wide range of industries including automotive, healthcare, retail, and more. Their comprehensive community and partner ecosystem enable organizations to unlock hidden savings and improve compliance, promoting growth and resilience in a changing economic climate.

📋 Description

• Design and implement multi-cloud security controls across Coupa's cloud environment, including VPC segmentation, security groups/NACLs, IAM policy design, permission boundaries, and Organizations/SCPs guardrails • Build policy as code and IaC security guardrails and integrate them into CI/CD as pre-merge and pre-deploy gates • Harden containerized workloads and Kubernetes clusters through image scanning, admission control, pod security standards, network policies, and runtime detection • Own vulnerability analysis of application packages, container images, and third-party dependencies • Design and implement secure code, cloud configuration, and IAM policy remediations • Support incident response and forensics through log analysis, root-cause investigation, and remediation validation • Partner with Risk & Compliance on technical evidence and control validation for SOC 2, ISO 27001, PCI-DSS, and FedRAMP • Support and mentor other security engineers by reviewing designs and remediation plans • Participate in the on-call/incident rotation and improve remediation and response runbooks

🎯 Requirements

• 7+ years of experience in security engineering or penetration testing • Practical experience with AWS, GCP, or Azure cloud security fundamentals, including IAM and networking • Strong scripting and automation skills in Python, Bash, or JavaScript • Experience with dependency and container vulnerability scanning tools and CI/CD integration • Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP • Critical thinking and root-cause analysis skills • Clear written and verbal communication skills • Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience • Relevant certifications are a plus: CISSP, CCSP, CISA, or AWS/GCP security certifications

🏖️ Benefits

• Two designated company-wide paid wellness days off each year • Paid day off on your birthday or another day of your choice within your birthday month • 40 hours of paid Volunteer Time Off annually • Free, confidential, 24/7/365 Employee Assistance Program counseling and resources • Business Travel Protection through Zurich Travel Assist, including medical, safety, pre-trip planning, and emergency support • Monetary referral bonuses for successful referrals • Location-specific benefits packages including comprehensive medical/dental insurance, retirement/pension plans, and life or accident protection