Security Engineer

Back to jobs Security Engineer Gurgaon, India This position is required to be in office 3 days per week. About Us: At Sauce Labs, we empower the world's top enterprises - like Walmart, Bank of America, and Indeed - to deliver quality web and mobile applications at speed. Our industry-leading platform ensures continuous quality across the SDLC, using AI-powered analytics to identify key quality signals from development through production. With our unified solution, teams can release and innovate with confidence, knowing their apps will always look, function, and perform exactly as they should. Backed by TPG and Riverwood Capital, we are shaping the future of digital confidence - join us! The Role: We are seeking a highly motivated and detail-oriented Security Engineer to join our Security Blue Team. This is an excellent opportunity for an individual passionate about cybersecurity to grow their experiences across a wide array of infrastructure and technologies, including mobile devices, Kubernetes, public cloud, and on-premises infrastructure. You will play a vital role in identifying vulnerabilities, implementing security controls, and contributing to our overall security posture. Responsibilities: Assist in the implementation and maintenance of security controls across our macOS, Linux, and Kubernetes environment, with a focus on Ubuntu and Google Kubernetes Engine. Assist the IT team in securing and monitoring corporate workstations and devices. Conduct regular security assessments and vulnerability scans using tools like Tenable Nessus or OpenVAS. Analyze security events and notifications, escalating internally as necessary. Perform triage and maintain ownership of vulnerabilities across a wide range of sources and teams. Apply knowledge of common security frameworks (MITRE ATT&CK, OWASP Top 10, CIS, etc.) to assess and improve security measures. Contribute to securing our cloud infrastructure, with a preference for Google Cloud Platform, applying CSPM and general cloud security best practices. Develop and maintain shell scripts (zsh or bash) for automation and security-related tasks. Establish, own and report on security-focused metrics, such as number and type of incidents, response times, SLA commitments, failed login attempts, or key rotation frequency. Document security configurations, procedures, and incidents. Own security-related policies and associated evidence and artifacts, including drafting and supporting policies critical to industry-standard audit programs and certifications. Participate in an on-call rotation supporting nights and weekends. Shift working hours to participate in global team ceremonies such as Stand Up, Planning, Refinement, and Retrospectives. Required Skills: Associate's or Bachelor's of Science degree in a relevant field, or equivalent practical experience. 3-5 years of hands-on experience in IT support, systems administration, or cybersecurity-related positions. Demonstrable knowledge of Linux servers, preferably Ubuntu, including related usage and basic administrative tasks. Proficiency in a shell scripting language, such as zsh or bash. Familiarity with common security frameworks, such as MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, Cyber Kill Chain, Pyramid of Pain, or similar. Understanding of Cloud Security Posture Management (CSPM) and general Cloud Security practices in at least one major cloud provider, with a preference for Google Cloud Platform. Experience leveraging vulnerability and security scanning tools, such as Tenable Nessus and OpenVAS, as well as the more generic scanning categories of SAST, DAST, and SCA. Experience working with or as a Cybersecurity Analyst. Experience working in verticals such as infrastructure security, application security, mobile security, corporate endpoint security, or SaaS Security. Builder and ownership mentality. Nice-to-Have Qualifications: Experience administering macOS workstations. Experience securing corporate endpoints and workstations, such as Windows, macOS, Android, or iOS, especially in a hybrid work environment. Experience as a SysAdmin. Experience with programming or automation systems, such as Ansible, Python, or SaltStack. Experience building a highly available open source SIEM, such as Wazuh, Security Onion, or building from scratch leveraging technologies such as Graylog, ElasticSearch or OpenSearch, or similar. Experience responding to or managing IDS systems, such as Suricata, Zeek, Snort, Wazuh, Falco, or similar. Experience with DFIR tools, such as Velociraptor, OSQuery, or similar. Experience managing and owning the deployment and implementation of critical inline security systems – such as an IDP, WAF, or Taps – in a production environment. Experience with Kubernetes, either as a user or administrator, at a level equivalent to CKAD, CKA, or CKS. Experience in TPRM. Experience with industry-standard auditing frameworks and certifications, such as SOC 2, ISO 27001, or ISO 42001. Experience using and/or security AI or LLM systems. Please note our privacy terms when applying for a job at Sauce Labs. Sauce Labs is proud to be an Equal Opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender identity/expression/status, sexual orientation, age, marital status, veteran status or disability status. Security responsibilities at Sauce At Sauce, we will commit to supporting the health and safety of employees and properties, partnering with internal stakeholders to learn and act on ever-evolving security protocols and procedures. You’ll be expected to fully comply with all policies and procedures related to security at the department and org wide level and exercise a ‘security first’ approach to how we design, build & run our products and services. Create a Job Alert Interested in building your career at Sauce Labs Inc.? Get future opportunities sent straight to your email. Create alert Apply for this job indicates a required field First Name* Last Name* Email* Phone Country* Phone* 244 results found No results found Afghanistan+93 Åland Islands+358 Albania+355 Algeria+213 American Samoa+1 Andorra+376 Angola+244 Anguilla+1 Antigua & Barbuda+1 Argentina+54 Armenia+374 Aruba+297 Ascension Island+247 Australia+61 Austria+43 Azerbaijan+994 Bahamas+1 Bahrain+973 Bangladesh+880 Barbados+1 Belarus+375 Belgium+32 Belize+501 Benin+229 Bermuda+1 Bhutan+975 Bolivia+591 Bosnia & Herzegovina+387 Botswana+267 Brazil+55 British Indian Ocean Territory+246 British Virgin Islands+1 Brunei+673 Bulgaria+359 Burkina Faso+226 Burundi+257 Cambodia+855 Cameroon+237 Canada+1 Cape Verde+238 Caribbean Netherlands+599 Cayman Islands+1 Central African Republic+236 Chad+235 Chile+56 China+86 Christmas Island+61 Cocos (Keeling) Islands+61 Colombia+57 Comoros+269 Congo - Brazzaville+242 Congo - Kinshasa+243 Cook Islands+682 Costa Rica+506 Côte d’Ivoire+225 Croatia+385 Cuba+53 Curaçao+599 Cyprus+357 Czechia+420 Denmark+45 Djibouti+253 Dominica+1 Dominican Republic+1 Ecuador+593 Egypt+20 El Salvador+503 Equatorial Guinea+240 Eritrea+291 Estonia+372 Eswatini+268 Ethiopia+251 Falkland Islands+500 Faroe Islands+298 Fiji+679 Finland+358 France+33 French Guiana+594 French Polynesia+689 Gabon+241 Gambia+220 Georgia+995 Germany+49 Ghana+233 Gibraltar+350 Greece+30 Greenland+299 Grenada+1 Guadeloupe+590 Guam+1 Guatemala+502 Guernsey+44 Guinea+224 Guinea-Bissau+245 Guyana+592 Haiti+509 Honduras+504 Hong Kong SAR China+852 Hungary+36 Iceland+354 India+91 Indonesia+62 Iran+98 Iraq+964 Ireland+353 Isle of Man+44 Israel+972 Italy+39 Jamaica+1 Japan+81 Jersey+44 Jordan+962 Kazakhstan+7 Kenya+254 Kiribati+686 Kosovo+383 Kuwait+965 Kyrgyzstan+996 Laos+856 Latvia+371 Lebanon+961 Lesotho+266 Liberia+231 Libya+218 Liechtenstein+423 Lithuania+370 Luxembourg+352 Macao SAR China+853 Madagascar+261 Malawi+265 Malaysia+60 Maldives+960 Mali+223 Malta+356 Marshall Islands+692 Martinique+596 Mauritania+222 Mauritius+230 Mayotte+262 Mexico+52 Micronesia+691 Moldova+373 Monaco+377 Mongolia+976 Montenegro+382 Montserrat+1 Morocco+212 Mozambique+258 Myanmar (Burma)+95 Namibia+264 Nauru+674 Nepal+977 Netherlands+31 New Caledonia+687 New Zealand+64 Nicaragua+505 Niger+227 Nigeria+234 Niue+683 Norfolk Island+672 North Korea+850 North Macedonia+389 Northern Mariana Islands+1 Norway+47 Oman+968 Pakistan+92 Palau+680 Palestinian Territories+970 Panama+507 Papua New Guinea+675 Paraguay+595 Peru+51 Philippines+63 Poland+48 Portugal+351 Puerto Rico+1 Qatar+974 Réunion+262 Romania+40 Russia+7 Rwanda+250 Samoa+685 San Marino+378 São Tomé & Príncipe+239 Saudi Arabia+966 Senegal+221 Serbia+381 Seychelles+248 Sierra Leone+232 Singapore+65 Sint Maarten+1 Slovakia+421 Slovenia+386 Solomon Islands+677 Somalia+252 South Africa+27 South Korea+82 South Sudan+211 Spain+34 Sri Lanka+94 St. Barthélemy+590 St. Helena+290 St. Kitts & Nevis+1 St. Lucia+1 St. Martin+590 St. Pierre & Miquelon+508 St. Vincent & Grenadines+1 Sudan+249 Suriname+597 Svalbard & Jan Mayen+47 Sweden+46 Switzerland+41 Syria+963 Taiwan+886 Tajikistan+992 Tanzania+255 Thailand+66 Timor-Leste+670 Togo+228 Tokelau+690 Tonga+676 Trinidad & Tobago+1 Tunisia+216 Turkey+90 Turkmenistan+993 Turks & Caicos Islands+1 Tuvalu+688 U.S. Virgin Islands+1 Uganda+256 Ukraine+380 United Arab Emirates+971 United Kingdom+44 United States+1 Uruguay+598 Uzbekistan+998 Vanuatu+678 Vatican City+39 Venezuela+58 Vietnam+84 Wallis & Futuna+681 Western Sahara+212 Yemen+967 Zambia+260 Zimbabwe+263 Location (City)* Resume/CV* Attach Enter manually Accepted file types: pdf, doc, docx, txt, rtf This position is required to be in office 3 days per week. Responsibilities: Assist in the implementation and maintenance of security controls across our macOS, Linux, and Kubernetes environment, with a focus on Ubuntu and Google Kubernetes Engine. Assist the IT team in securing and monitoring corporate workstations and devices. Conduct regular security assessments and vulnerability scans using tools like Tenable Nessus or OpenVAS. Analyze security events and notifications, escalating internally as necessary. Perform triage and maintain ownership of vulnerabilities across a wide range of sources and teams. Apply knowledge of common security frameworks (MITRE ATT&CK, OWASP Top 10, CIS, etc.) to assess and improve security measures. Contribute to securing our cloud infrastructure, with a preference for Google Cloud Platform, applying CSPM and general cloud security best practices. Develop and maintain shell scripts (zsh or bash) for automation and security-related tasks. Establish, own and report on security-focused metrics, such as number and type of incidents, response times, SLA commitments, failed login attempts, or key rotation frequency. Document security configurations, procedures, and incidents. Own security-related policies and associated evidence and artifacts, including drafting and supporting policies critical to industry-standard audit programs and certifications. Participate in an on-call rotation supporting nights and weekends. Shift working hours to participate in global team ceremonies such as Stand Up, Planning, Refinement, and Retrospectives. Required Skills: Associate's or Bachelor's of Science degree in a relevant field, or equivalent practical experience. 3-5 years of hands-on experience in IT support, systems administration, or cybersecurity-related positions. Demonstrable knowledge of Linux servers, preferably Ubuntu, including related usage and basic administrative tasks. Proficiency in a shell scripting language, such as zsh or bash. Familiarity with common security frameworks, such as MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, Cyber Kill Chain, Pyramid of Pain, or similar. Understanding of Cloud Security Posture Management (CSPM) and general Cloud Security practices in at least one major cloud provider, with a preference for Google Cloud Platform. Experience leveraging vulnerability and security scanning tools, such as Tenable Nessus and OpenVAS, as well as the more generic scanning categories of SAST, DAST, and SCA. Experience working with or as a Cybersecurity Analyst. Experience working in verticals such as infrastructure security, application security, mobile security, corporate endpoint security, or SaaS Security. Builder and ownership mentality. Nice-to-Have Qualifications: Experience administering macOS workstations. Experience securing corporate endpoints and workstations, such as Windows, macOS, Android, or iOS, especially in a hybrid work environment. Experience as a SysAdmin. Experience with programming or automation systems, such as Ansible, Python, or SaltStack. Experience building a highly available open source SIEM, such as Wazuh, Security Onion, or building from scratch leveraging technologies such as Graylog, ElasticSearch or OpenSearch, or similar. Experience responding to or managing IDS systems, such as Suricata, Zeek, Snort, Wazuh, Falco, or similar. Experience with DFIR tools, such as Velociraptor, OSQuery, or similar. Experience managing and owning the deployment and implementation of critical inline security systems – such as an IDP, WAF, or Taps – in a production environment. Experience with Kubernetes, either as a user or administrator, at a level equivalent to CKAD, CKA, or CKS. Experience in TPRM. Experience with industry-standard auditing frameworks and certifications, such as SOC 2, ISO 27001, or ISO 42001. Experience using and/or security AI or LLM systems. Please note our privacy terms when applying for a job at Sauce Labs. Sauce Labs is proud to be an Equal Opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender identity/expression/status, sexual orientation, age, marital status, veteran status or disability status. Security responsibilities at Sauce At Sauce, we will commit to supporting the health and safety of employees and properties, partnering with internal stakeholders to learn and act on ever-evolving security protocols and procedures. You’ll be expected to fully comply with all policies and procedures related to security at the department and org wide level and exercise a ‘security first’ approach to how we design, build & run our products and services. Show more