Sr Security Engineer - Red Team - 11817
Coupa Software, Inc.
IndiaremotePosted 21 days ago
Skill Required
Security-EngineeringRed-Team-OperationsPenetration-TestingApplication-SecurityCybersecurityRed-Team-Security-EngineerRed-Team-EngineerSenior-Cybersecurity-EngineerSenior-Security-Testing-EngineerSenior-Information-Security-EngineerRed-Team-SpecialistSecurity-EngineerSecurity EngineersecurityPenetration TestingOWASPbuildingTestNGPythonAzureCloudAPIsAWSGCPandGenerative AIAIMachine LearningFulltime
Key highlights
- Coupa uses trillions of dollars of direct and indirect spend data across 10M+ buyers and suppliers
- Coupa AI powers the platform with community-generated AI for total spend management
- Sr Security Engineer is a key part of the Red Team
- 3-8 years of experience required in equivalent security-related role
- Hands-on experience in AI-driven security testing required
- Location-specific benefits packages include comprehensive medical/dental insurance, retirement/pension plans, and life or accident protection
Role overview
Coupa is a total spend management platform that uses community-generated AI and industry-leading technology to help businesses improve their operating margins. The company operates a global network of 10M+ buyers and suppliers with trillions of dollars of spend data. Coupa's Sr Security Engineer role sits within the Red Team, focused on challenging and improving the company's security posture through hands-on, sophisticated security testing in a fast-paced, highly technical environment.
Responsibilities
- Execute sophisticated penetration tests and red team exercises
- Conduct penetration testing on internally and externally hosted applications such as Web apps, Mobile Apps, AI/LLM and APIs, leveraging both traditional and AI-powered tools
- Perform specialized security assessments and penetration testing on Coupa's AI and LLM integrations, specifically targeting prompt injection, jailbreaking, data poisoning, and model evasion
- Develop, deploy, and manage AI agents for continuous and autonomous security testing and vulnerability discovery
- Identify network and system vulnerabilities and provide recommended countermeasures or mitigating controls to reduce risk to an acceptable and manageable level
- Perform penetration and remediation testing & reporting and apply advanced penetration techniques in a fast-paced, highly technical environment
- Guide and consult development teams on secure coding best practices, including security for AI/ML models
- Serve as a key escalation point during critical security incidents, leveraging deep technical knowledge to lead root-cause analysis and threat hunting efforts
- Maintain, support, and extend application security tooling, standards, and processes, including but not limited to SAST, DAST, WAF, and emerging AI-based security analysis platforms
Requirements
- 3-8 years of experience in an equivalent security-related role, with hands-on experience in AI-driven security testing
- Bachelor's or Master's degree in Computer Science (or equivalent), or equivalent experience
- Hands-on Experience in developing or utilizing autonomous, agentic systems for security penetration testing
- Proven track record of building and maintaining cross-functional relationships, effectively navigating organizational friction to implement necessary security improvements
- Strong experience in web / API security, with a focus on testing and defending against attacks on AI/ML systems
- Familiarity with Cloud environments such as AWS, Azure, GCP
- Hands on experience in handling and managing bug bounty programs
- Proficiency in one or more scripting languages, with a strong preference for Python for AI/ML development
- Knowledge of common application security issues (e.g., OWASP Top 10, SANS Top 25) and familiarity with the OWASP Top 10 for Large Language Models
- Well-versed with pentest standards/frameworks such as PTES, OSSTMM, NIST, OSINT, and OWASP
- Ability to translate complex, highly technical security findings into actionable business risks for non-technical stakeholders and executive leadership
- Ability to work in a team environment
Nice to have
- Relevant security certifications (CEH, OSCP, GPEN, LPT, EWPTX)
Benefits
- Global Wellness Days: two designated, company-wide paid wellness days off each year
- Birthday Time-Off: paid day off on your birthday or another day of your choice within your birthday month
- Volunteer Time Off (VTO): 40 hours of paid VTO annually
- Employee Assistance Program (EAP): free, confidential, 24/7/365 counseling and resources
- Business Travel Protection: medical, safety, pre-trip planning, and emergency support during any business travel
- Referral Bonus Program: generous monetary referral bonuses for successful referrals
- Comprehensive medical/dental insurance
- Retirement/pension plans
- Life or accident protection
Additional details
- Coupa is 100% committed to creating and nurturing an environment that supports your physical, mental, and community well-being
- Location-specific benefits packages are tailored to your primary work location
- Coupa complies with relevant laws and regulations regarding equal opportunity and offers a welcoming and inclusive work environment
- Decisions related to hiring, compensation, training, or evaluating performance are made fairly
- Coupa offers equal employment opportunities to all qualified candidates and employees
- Inquiries or resumes from recruiters will not be accepted
- By submitting your application, you acknowledge that you have read Coupa's Privacy Policy
- Coupa receives/collects your application, including your personal data, for the purposes of managing Coupa's ongoing recruitment and placement activities, including for employment purposes in the event of a successful application and for notification of future job opportunities if you did not succeed the first time
- You will find more details about how your application is processed, the purposes of processing, and how long we retain your application in our Privacy Policy
- Originally posted on Himalayas