Staff Security Engineer

Icehouseventures; Bengaluru; On-site; INR 4,500,000 - 7,000,000; Full time

Job summary

Procore is seeking a Staff Security Engineer to join the Security Engineering team in Bengaluru, India. You’ll be a key contributor focused on building, implementing, and operating foundational security controls for our cloud platform and infrastructure.

You’ll work with Engineering, IT, Security Operations, and GRC to apply security principles across systems. This role emphasizes cloud security, automation, and secure IaC with Terraform and Kubernetes, plus on-call rotation.

Qualifications

• Bachelor's degree in Computer Science or equivalent practical experience.
• 8+ years of hands-on security/IT-ops experience.
• Solid understanding of IAM, network, and infrastructure security.
• Hands-on experience with at least one major cloud provider (AWS preferred).
• Experience identifying and exploiting web/API vulnerabilities and secure API design; scripting to automate tasks.

Responsibilities

• Configure and support IAM guardrails for cloud and corporate environments (AWS/GCP/Azure, Okta).
• Implement and support automated pipelines for asset inventory and SBOM generation.
• Support data protection tools, including key management and encryption.
• Configure secure setups for containerized workloads (Kubernetes/EKS) and Terraform IaC workflows.
• Collaborate with Product & Technology teams to test and document resilience patterns.
• Assist GRC and Internal Audit by gathering data on security controls.
• Operate and triage alerts from security tools and drive remediation.
• Participate in evaluating new security technologies and provide on-call support on rotation.

Skills

Cloud security

IAM

Automation

Scripting

Container security

Kubernetes

Secure API design

On-call familiarity

Education

Bachelor's degree in Computer Science or equivalent

Tools

AWS

GCP

Azure

Okta

Terraform

Kubernetes

Burp Suite

Job description

We’re looking for a Staff Security Engineer to join Procore’s Security Engineeringteam. In this role, you’ll be a key contributor, focused on building, implementing, and operating the foundational security controls that protect our platform, data, and users. Your primary goal is to help build and maintain a secure, scalable, and resilient cloud product and infrastructure.

As a Staff Security Engineer you’ll work with Engineering, IT, Security Operations, and GRC to apply security principles to our systems. Use your experience in cloud security, automation, and core security principles to implement and operate automated security controls across our SaaS ecosystem. This is a fantastic opportunity to grow your skills and make a real impact on protecting the data of millions of users - .

This position reports into the Senior Manager, Security Engineering and will be based in our Bengaluru, India office. We’re looking for someone to join us immediately.

What you’ll do:

At Procore, AI isn’t a specialized tool, it's a core competency. We expect every team member to be AI-literate, leveraging generative tools and agentic workflows to move faster and work smarter. You won’t just use AI; you’ll be building the agentic future of construction.

• Configure and support IAM guardrails for cloud (AWS/GCP/Azure) and corporate (Okta) environments.

• Implement and support automated pipelines for asset inventory and Software Bill of Materials (SBOM) generation.

• Support the implementation of data protection tools and processes, including key management and encryption.

• Implement secure configurations for our containerized (Kubernetes, EKS) and IaC (Terraform) workflows under the guidance of senior engineers.

• Collaborate with Product & Technology teams to test and document resilience patterns.

• Assist GRC and Internal Audit teams by gathering data and providing context on security controls.

• Operate and triage alerts from security tools and platforms, and help drive remediation.

• Participate in the evaluation of new security technologies and tools. Provide on-call support on a rotational basis

What we’re looking for:

• Bachelor's degree in Computer Science or equivalent practical experience.

• 8+ years of experience in a hands-on technical security or IT/ops role with a security focus.

• Solid understanding of core security domains such as IAM, network security, and infrastructure security.

• Hands-on experience with at least one major cloud provider (AWS preferred).

• Hands-on experience identifying and exploiting common web/API vulnerabilities (e.g., Burp Suite usage) and secure API design. Proficiency in scripting to automate simple security tasks or checks.

• Familiarity with identity and access management platforms platforms (IdP, IGA, PAM), joiner-mover-leaver (JML) mechanisms, and concepts (SAML, OAuth 2.0, OIDC, SCIM).

• Experience with, or a strong desire to learn, IaC (Terraform preferred) and container orchestration (Kubernetes). Understanding of data protection principles, including encryption and key management.

• A passion for automation and experience with scripting languages (Python, Go, or similar). Good communication skills and a collaborative, team-oriented attitude.