Sr Security Engineer

📋 Description

• Design and implement multi-cloud security controls across Coupa's cloud environment, including VPC
• Build policy as code and IaC security guardrails and wire them into CI/CD as pre-merge and
• Harden containerized workloads and Kubernetes clusters — image scanning, admission control, pod
• Own vulnerability analysis of application packages, container images, and third-party dependencies
• Design and implement remediations (not just report findings) including secure code fixes, cloud
• Support incident response and forensics as a technical contributor — log analysis, root-cause

🎯 Requirements

• 5+ years of experience in security engineering or cloud operations, with a track record of
• Practical experience with cloud security fundamentals (AWS, GCP, or Azure) — IAM, networking, and
• Strong scripting/automation skills in Python, Bash, or JavaScript, with experience building or
• Experience with dependency/container vulnerability scanning tools and integrating them into CI/CD
• Working knowledge of common compliance frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP) and what
• Critical thinking and root-cause analysis skills — comfortable digging past a scanner's output to

🎁 Benefits

• Global Wellness Days: two designated, company-wide paid wellness days off each year (typically the
• Birthday Time-Off: a paid day off on your birthday or another day of choice within your birthday
• Volunteer Time Off (VTO): 40 hours of paid VTO annually to support community initiatives and
• Employee Assistance Program (EAP): free, confidential, 24/7/365 counseling and resources for
• Business Travel Protection: Zurich Travel Assist provides medical, safety, pre-trip planning, and
• Referral Bonus Program: generous monetary referral bonuses for successful referrals.