Senior Cloud Security Engineer: Automation & Guardrails

Coupa; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Coupa seeks a Senior Security Engineer to own complex security programs across multiple cloud platforms, building scalable controls and tooling. You will collaborate with Engineering, IT, and Compliance to ship durable security measures and automate remediation rather than quick fixes.

You will lead vulnerability triage, design secure IAM policies, and contribute to audit readiness while mentoring junior engineers and supporting on-call duties.

Qualifications

• 7+ years in security engineering or related field with end-to-end ownership.
• Practical experience with multi-cloud security and IAM least-privilege.
• Ability to translate findings into remediation guidance and risk context.

Responsibilities

• Design and implement multi-cloud security controls across Coupa's cloud environment.
• Build policy as code and IaC security guardrails, integrated into CI/CD gates.
• Harden Kubernetes clusters and container workloads with secure controls.
• Own vulnerability analysis of apps, containers, and dependencies; triage by impact.
• Design and implement remediations including secure code fixes and IAM adjustments.
• Support incident response and forensics with log analysis and root-cause review.
• Collaborate with Risk & Compliance to provide audit evidence and control validation.
• Mentor other security engineers and participate in on-call rotations.

Skills

Cloud security

Python

Bash

JavaScript

CI/CD tooling

Vulnerability scanning

Compliance

Root-cause analysis

Communication

Education

Bachelor's degree in CS/IS or equivalent

Tools

AWS

GCP

Azure

Kubernetes

CI/CD tooling

Job description

Coupa seeks a Senior Security Engineer to own complex security programs across multiple cloud platforms, building scalable controls and tooling. You will collaborate with Engineering, IT, and Compliance to ship durable security measures and automate remediation rather than quick fixes.

You will lead vulnerability triage, design secure IAM policies, and contribute to audit readiness while mentoring junior engineers and supporting on-call duties.