Senior Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $83k - $116.3k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coupa Software

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2006

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Coupa Software is a leading provider of business spend management solutions. Their platform focuses on optimizing and transforming direct and indirect spend across procurement, finance, supply chain, and IT. Coupa leverages AI and extensive data insights to drive cost efficiencies, manage supplier relationships, and mitigate risks. With products covering areas such as invoicing, payments, expense management, and supply chain collaboration, Coupa serves a wide range of industries including automotive, healthcare, retail, and more. Their comprehensive community and partner ecosystem enable organizations to unlock hidden savings and improve compliance, promoting growth and resilience in a changing economic climate.

📋 Description

• Design and implement multi-cloud security controls across Coupa's cloud environment, including VPC segmentation, security groups/NACLs, IAM policy design, permission boundaries, and Organizations/SCPs • Build policy-as-code and IaC security guardrails and integrate them into CI/CD as pre-merge and pre-deploy gates • Harden containerized workloads and Kubernetes clusters through image scanning, admission control, pod security standards, network policies, and runtime detection • Own vulnerability analysis of application packages, container images, and third-party dependencies • Design and implement secure code fixes, cloud configuration changes, and IAM policy remediations • Support incident response and forensics through log analysis, root-cause investigation, and remediation validation • Partner with Risk & Compliance on technical evidence and control validation for SOC 2, ISO 27001, PCI-DSS, and FedRAMP • Support and mentor other security engineers by reviewing designs and remediation plans • Participate in the on-call/incident rotation and improve remediation and response runbooks

🎯 Requirements

• 5+ years of experience in security engineering or cloud operations • Experience independently owning complex assessments from scoping through remediation • Practical AWS, GCP, or Azure security experience, including IAM, networking, and cloud misconfigurations • Strong scripting and automation skills in Python, Bash, or JavaScript • Experience with dependency and container vulnerability scanning tools and CI/CD integration • Working knowledge of SOC 2, ISO 27001, PCI-DSS, and FedRAMP • Critical thinking and root-cause analysis skills • Clear written and verbal communication skills for technical remediation guidance and risk context • Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience • CISSP, CCSP, CISA, or AWS/GCP security certifications are a plus

🏖️ Benefits

• Two company-wide paid wellness days off each year • Paid day off on your birthday or another day within your birthday month • 40 hours of paid volunteer time off annually • Free, confidential, 24/7/365 Employee Assistance Program • Business travel protection through Zurich Travel Assist • Monetary referral bonuses for successful referrals • Location-specific comprehensive medical/dental insurance • Location-specific retirement/pension plans • Location-specific life or accident protection