Senior Information Security Engineer

BlackLine Systems Development and Services (India); Bengaluru; On-site; INR 750,000 - 1,100,000; Full time

Job summary

BlackLine seeks a Sr. Information Security Engineer to lead security strategy, manage on-call duties, and drive automation across cloud and on-prem components.

You will triage alerts, develop runbooks, and oversee EDR/DLP/WAF deployments while mentoring teammates and shaping security standards across environments.

Qualifications

• 5+ years of hands-on information security experience with 1+ year in WAF management.
• Proficient in cloud security across SCCE, AWS, or Azure.
• Strong scripting ability to automate tasks and interface with APIs.

Responsibilities

• Lead on-call responses and triage security alerts during India shift.
• Develop SOPs and automated playbooks to handle threats.
• Define testing scopes for security assessments and pentests.
• Research and triage threats using AI tools and platforms.
• Operationalize security infra via Terraform and automation.
• Manage EDR, DLP, and Web Application Firewalls in production.
• Mentor junior engineers and share security best practices.

Skills

WAF management

Cloud security

Scripting proficient

Incident response

Terraform automation

EDR/DLP security

Linux/Windows

Network security

Security leadership

Tools

SCCE

AWS Security Hub

Azure Security Center

WAF technologies

Job description

Make Your Mark: Reporting to the Senior Director of Information Security, the Sr. Information Security Engineer will play a lead role in executing security strategy and consulting on best-in-class security architecture and security posture for BlackLine. In this role you will provide on-call duties, manage/triage ticket queues, review access requests, review architecture, implement security solutions, collaborate with cross-functional teams, perform vulnerability management functions, and execute the evolution of Blackline’s Enterprise Information Security components.

You'll Get To:

• Participate in a 'follow-the-sun' on-call schedule, acting as the primary responder during the India shift to monitor, triage, and manage the security alerts queue.
• Bridge the gap between research and remediation by developing manual runbooks (SOPs) and automated playbooks needed to handle threats and eliminate noise.
• Establish the operational scope and testing boundaries for security assessments and penetration tests, focusing on targeted risk discovery and impact.
• Apply a research-first mindset to incident response, demonstrating the critical thinking needed to independently triage threats and figure out new tools across a varied security landscape.
• Operationalize security infrastructure through Terraform, with the foundational knowledge to independently research and implement automation across various providers and platforms.
• Manage the operation of key security technologies, including Endpoint Detection and Response (EDR), Data Loss Prevention (DLP), and Web Application Firewalls (WAF).
• Leverage AI and LLMs to accelerate security analysis, automate repetitive tasks, and drive operational efficiency across the security stack.
• Flex into evolving security initiatives and technical projects as they arise, taking ownership of tasks that fall beyond the initial scope of this role.
• Define effective information security standards applicable to specific environments.
• Create and maintain operational reports and security metrics, translating raw data into the technical insights required for data-driven decision-making.
• Serve as a technical leader and mentor, providing guidance to junior engineers and collaborating with cross-functional teams on security best practices.

What You'll Bring:

• 5+ years of hands-on information security experience, including 1 year of experience managing Web Application Firewalls (WAF).
• Practical experience with cloud security platforms like SCCE, AWS Security Hub, or Azure Security Center, and the technical "scrappiness" to research and utilize new security services across a multi-cloud environment.
• Strong problem-solving and analytical skills with the ability to identify security risks and propose effective solutions.
• Highly autonomous and productive in performing activities, requiring minimal direction from management.
• Proven ability to leverage scripting languages, such as Python, Bash, and PowerShell, to interface with applications and/or available APIs.
• Expertise in Windows and with a working knowledge of Linux/Unix (advanced Linux skills are a big plus).
• Working knowledge of network security-through understanding of the OSI model and comprehensive knowledge of common protocols and services for levels 3 through 7.
• Advanced written and verbal communication skills including the ability to present technical subjects to non-technical audiences.
• Maintain technical depth in common vulnerabilities and exploitation techniques to independently research, triage, and remediate complex security findings.

We’re Even More Excited If You Have:

• Experience in securing Kubernetes and containers.
• Hands-on experience with securing AI systems and LLMs.
• Working knowledge of WMI and WSH in a modern security context.
• Utilize outside the box thinking to define new and improved solutions or optimize current processes and tools.
• Thrive at BlackLine.

Because you are joining: A technology-based company with a sense of adventure and a vision for the future. Every door at BlackLine is open. Just bring your brains, your problem-solving skills, and be part of a winning team at the world's most trusted name in Finance Automation! A culture that is kind, open, and accepting. It's a place where people can embrace what makes them unique, and the mix of cultural backgrounds and varying interests cultivates diverse thought and perspectives. A culture where BlackLiner's continued growth and learning is empowered. BlackLine offers a wide variety of professional development seminars and inclusive affinity groups to celebrate and support our diversity.

BlackLine is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, race, ethnicity, age, religious creed, national origin, physical or mental disability, ancestry, color, marital status, sexual orientation, military or veteran status, status as a victim of domestic violence, sexual assault or stalking, medical condition, genetic information, or any other protected class or category recognized by applicable equal employment opportunity or other similar laws.

BlackLine recognizes that the ways we work and the workplace itself has shifted. We innovate in a workplace that optimizes a combination of virtual and in-person interactions to maximize collaboration and nurture our culture. Candidates who live within a reasonable commute to one of our offices will work in the office at least 3 days a week.

Accommodations: BlackLine is committed to creating an inclusive and accessible experience for all candidates.

At BlackLine, we follow a comprehensive recruitment process which is undertaken by our talent acquisition team. We conduct personal interviews of all potential job seekers and do not follow practice of making employment offers based solely on a candidate’s resume.

Openings at BlackLine are listed on our career webpage in addition to being advertised in job portals.