Security Software Engineer

Cohesity; Pune District; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

Cohesity is seeking an experienced Security Engineer to design and maintain security features for enterprise products. The ideal candidate will have over 8 years in software development, with a focus on security engineering.

You will perform security reviews, partner with engineering teams, and ensure secure practices. A Bachelor's or Master’s degree in relevant fields is required. Strong programming skills in languages like Go, Python, or Rust will be essential.

This role is located in Pune, India, with expectations for hybrid work.

Qualifications

• 8+ years of software development experience, with at least 4+ years focused on security.
• Deep understanding of application security concepts, including OWASP Top 10.
• Experience with threat modeling, security architecture reviews, and vulnerability remediation.

Responsibilities

• Design, develop, and maintain security features for enterprise products.
• Perform threat modeling and security reviews for product features.
• Partner with engineering teams to implement secure coding practices.

Skills

Software development experience

Security engineering

Application security

Programming in Go, Python, or Rust

Secure software development lifecycle

Cloud security

Threat modeling

Cryptography fundamentals

CI/CD security

Education

Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cybersecurity

Tools

AWS

Azure

GCP

Kubernetes

Job description

Cohesity is the leader in AI‑powered data security. Over 13,600 enterprise customers, including over 85 of the Fortune 100 and nearly 70% of the Global 500, rely on Cohesity to strengthen their resilience while providing Gen AI insights into their vast amounts of data. Formed from the combination of Cohesity with Veritas’ enterprise data protection business, the company’s solutions secure and protect data on‑premises, in the cloud, and at the edge. Backed by NVIDIA, IBM, HPE, Cisco, AWS, Google Cloud, and others, Cohesity is headquartered in Santa Clara, CA, with offices around the globe. We’ve been named a Leader by multiple analyst firms and have been globally recognized for Innovation, Product Strength, and Simplicity in Design, and our culture.

Key Responsibilities

• Design, develop, and maintain security features, tools, frameworks, and automation for enterprise‑scale products and platforms.
• Contribute to secure architecture and design reviews for new and existing systems.
• Perform threat modeling, risk assessment, and security reviews for product features, services, APIs, and infrastructure components.
• Identify, analyze, and remediate security vulnerabilities in application code, services, cloud infrastructure, and third‑party dependencies.
• Build and improve security automation for vulnerability detection, remediation, compliance validation, secrets management, and policy enforcement.
• Partner with engineering teams to implement secure coding practices and security‑by‑design principles.
• Expertise in using AI to build Security Code Scanning, Patching and CVE discovery similar to SAST, DAST, SCA, container security, and identity systems.
• Work on authentication, authorization, access control, encryption, key management, audit logging, and secure communication mechanisms.
• Participate in incident response activities, root cause analysis, and long‑term remediation planning when required.
• Define and implement security best practices for cloud‑native, distributed, and microservices‑based environments.
• Mentor junior engineers and help raise the security engineering maturity of the broader organization.
• Create technical documentation, design specifications, security guidelines, and operational runbooks.

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 8+ years of software development experience, with at least 4+ years focused on security engineering, application security, product security, or cloud security.
• Strong programming experience in one or more languages such as Go, Python, or Rust.
• Deep understanding of secure software development lifecycle practices.
• Strong knowledge of application security concepts, including OWASP Top 10, secure coding, input validation, authentication, authorization, session management, and API security.
• Experience with threat modeling, security architecture reviews, and vulnerability remediation.
• Good understanding of cryptography fundamentals, TLS, PKI, encryption, hashing, signing, and key management.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Familiarity with container and Kubernetes security concepts.
• Experience with CI/CD security, DevSecOps practices, and security automation.
• Strong debugging, problem‑solving, and analytical skills.
• Ability to work independently on complex technical problems with minimal supervision.
• Excellent written and verbal communication skills.

Data Privacy Notice for Job Candidates: For information on personal data processing, please see our Privacy Policy.

Equal Employment Opportunity Employer (EEOE): Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at 1-855-9COHESITY or [e-mail] for assistance.

In-Office Expectations: Cohesity employees who are within a reasonable commute (e.g. within a forty‑five (45) minute average travel time) work out of our core offices 2‑3 days a week of their choosing. Interested candidates based outside of the designated areas are welcome to apply, provided they have the right to work in the job location.