senior security engineer

Procore Technologies

<div>Job Description 
We&rsquo;re looking for a Senior Security Engineer to join Procore&rsquo;s Security Engineering team. In this role, you&rsquo;ll be a senior member of the team, responsible for building and running the foundational security controls that protect our platform, data, and users. Your primary goal is to build and maintain a secure, scalable, and resilient cloud product and infrastructure.
As a Senior Security Engineer, you&rsquo;ll partner with Engineering, IT, Security Operations, and GRC to integrate security into new and existing systems. Use your strong experience in cloud security, data protection, and identity and access management to build and deploy automated security controls across our SaaS ecosystem. This is a critical role in strengthening our security posture and protecting the data of millions of users - Apply today.
This position reports into the Manager, Security Engineering and will be based in our Bangalore, India office. We&rsquo;re looking for someone to join us immediately.
What you&rsquo;ll do:<ul><li>
Build and maintain automated pipelines for authoritative asset inventory and Software Bill of Materials (SBOM) generation.</li><li>
Implement and manage scalable IAM guardrails for cloud (AWS/GCP/Azure) and corporate (Okta) environments.</li><li>
Contribute to the technical roadmap and execute on projects for data protection, including key management, encryption, and tokenization.</li><li>
Develop and implement secure configurations for our containerized (Kubernetes, EKS) and IaC (Terraform) workflows.</li><li>
Work with SRE and GRC teams to test and validate resilience patterns and disaster recovery capabilities.</li><li>
Provide clear technical context on security controls and architecture to our GRC and Internal Audit teams.</li><li>
Mentor junior engineers and help review code and designs for security best practices.</li><li>
Evaluate and recommend new security technologies and platforms to solve immediate business problems.</li></ul>
What we&rsquo;re looking for:<ul><li>
Bachelor's degree in Computer Science or equivalent practical experience.</li><li>
5+ years of experience in a hands-on technical security role, with at least 2 years focused on cloud security.</li><li>
Strong knowledge in several security domains (e.g., IAM, IaaS, network) and a willingness to learn others.</li><li>
Strong hands-on experience with at least one major cloud provider (AWS preferred) and its security services.</li><li>
Experience with identity and access management platforms (IdP, IGA, PAM) and concepts (SAML, OAuth 2.0, OIDC).</li><li>
Experience with IaC (Terraform), CI/CD pipelines, and container orchestration (Kubernetes).</li><li>
Solid understanding of data protection principles, including encryption, key management, and tokenization.</li><li>
A &quot;builder&quot; mindset with strong automation and scripting skills (Python, Go, or similar).Strong communication skills and the ability to work effectively with cross-functional teams.</li></ul> 
Additional Information<div></div> 
Perks &amp; Benefits
At Procore, we invest in our employees and provide a full range of benefits and perks to help you grow and thrive. From generous paid time off and healthcare coverage to career enrichment and development programs, learn more details about what we offer and how we empower you to be your best.

About Us
Procore Technologies is building the software that builds the world. We provide cloud-based construction management software that helps clients more efficiently build skyscrapers, hospitals, retail centers, airports, housing complexes, and more. At Procore, we have worked hard to create and maintain a culture where you can own your work and are encouraged and given resources to try new ideas. Check us out on Glassdoor to see what others are saying about working at Procore.
We are an equal-opportunity employer and welcome builders of all backgrounds. We thrive in a dynamic and inclusive environment. We do not tolerate discrimination against candidates or employees on the basis of gender, sex, national origin, civil status, family status, sexual orientation, religion, age, disability, race, traveler community, status as a protected veteran or any other classification protected by law.
If you'd like to stay in touch and be the first to hear about new roles at Procore, join our Talent Community.
Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact our benefits team here to discuss reasonable accommodations.</div>

Senior Security Engineer

Confluent

<div>We&rsquo;re not just building better tech. We&rsquo;re rewriting how data moves and what the world can do with it. With Confluent, data doesn&rsquo;t sit still. Our platform puts information in motion, streaming in near real-time so companies can react faster, build smarter, and deliver experiences as dynamic as the world around them.
It takes a certain kind of person to join this team. Those who ask hard questions, give honest feedback, and show up for each other. No egos, no solo acts. Just smart, curious humans pushing toward something bigger, together.
One Confluent. One Team. One Data Streaming Platform.
We are looking for an experienced security engineer to join our infrastructure security engineering team with a strong focus on detection and response. You will have a unique opportunity to leverage your threat detection and response experience and build some of the foundational systems and services to keep our infrastructure free from malicious actors and threats.
You will partner closely with all engineering teams, IT administrators, and compliance analysts to ensure that we maintain sufficient visibility into our environments and develop effective programs and practices to ensure that our environments are always secure. Tooling and automation will be key to success as we scale our environments to meet customer demand.
We intend to be the world's best, fastest, and most complete stream processing service built by an excellent team, all while having fun - come join us on the journey!
What You Will Do:<ul><li>
Collaborate with engineering teams for building and setting up pipelines needed to gather relevant security telemetry.</li><li>
Build and maintain an effective and scalable security monitoring infrastructure solution.</li><li>
Develop detection strategies to identify anomalous activity and ensure that our critical infrastructure and services operate in a safe environment.</li><li>
Triage alerts and drive security incidents to closure while reducing its potential impact to Confluent.</li><li>
Build processes and workflows to triage security alerts and respond to real incidents.</li><li>
Research new threat attack vectors and ensure that our detection and response capability is in line with the current threat landscape.</li><li>
Proactively improve the quality of our detection rules and strive to eliminate classes of issues by working directly with engineering teams.</li><li>
Contribute to strategy, risk management and prioritization for all efforts around detection and response.</li></ul>
What You Will Bring:<ul><li>
8+ years of relevant industry experience.</li><li>
Strong domain knowledge in security incident detection and response.</li><li>
Hands-on experience in instrumenting and deploying telemetry solutions to ensure visibility in large-scale, heterogenous deployments.</li><li>
Demonstrated experience with effective incident response and containment practices, preferably in a cloud-first environment.</li><li>
Experience with operating open-source and/or commercial solutions for logging and security event management.</li><li>
Decision-maker with the ability to operate with freedom and autonomy.</li><li>
Experience working with distributed teams and other cross-functional stakeholders.</li><li>
Ability to manage competing priorities and workload.</li><li>
Ability to script or code fluently in an interpreted language.</li><li>
Experience with serverless deployments in AWS, GCP, or Azure is a plus.</li></ul><h2 class="jobSectionHeader">
Ready to build what's next? Let&rsquo;s get in motion.</h2><h1 class="jobSectionHeader">
Come As You Are</h1>
Belonging isn&rsquo;t a perk here. It&rsquo;s the baseline. We work across time zones and backgrounds, knowing the best ideas come from different perspectives. And we make space for everyone to lead, grow, and challenge what&rsquo;s possible.
We&rsquo;re proud to be an equal opportunity workplace. Employment decisions are based on job-related criteria, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by law.</div>

Senior Security Engineer II

GSSTech Group

<div><h3 class="jobSectionHeader">Key Responsibilities</h3><ul>
<li>Lead migration of BeyondTrust setup from hardware appliances to virtual machines (VMs) end to end.</li>
<li>Perform upgrades, security patching and post-upgrade stability checks for Appliance, BI, and BIUL components.</li>
<li>Manage and maintain BeyondTrust PAM (BTPAM) infrastructure, including Smart Rules, onboarding workflows, and role-based access controls.</li>
<li>Configure and troubleshoot Active Directory Bridge (ADB) and Privileged Management for Unix/Linux (PMUL).</li>
<li>Define and enforce security policies aligned with compliance standards.</li>
<li>Register APIs and manage Secret Safe configurations.</li>
<li>Onboard Windows, Linux, and network devices, including service accounts and password rotation.</li>
<li>Conduct user access reviews, offboarding, and audit trail analysis.</li>
<li>Configure custom platforms and database connections within BTPAM.</li>
<li>Implement monitoring strategies and handle Breakglass scenarios.</li>
<li>Collaborate with vendor support for issue resolution and case management.</li>
<li>Ensure effective load balancing and backup retention strategies.</li>
<li>Work cross-functionally to support secure access and infrastructure resilience.</li>
</ul>
Requirements<h3 class="jobSectionHeader">
Required Skills &amp; Knowledge</h3><ul>
<li>Strong understanding of BeyondTrust PAM architecture and operations.</li>
<li>Experience with Active Directory, DNS, and infrastructure validation tools and familiarity with ports, protocols, and networking fundamentals relevant to PAM.</li>
<li>Proven ability to manage user access lifecycle and onboarding workflows.</li>
<li>Knowledge of audit, monitoring, and password rotation features in BTPAM.</li>
<li>Experience troubleshooting high-priority (P1) issues and conducting root cause analysis.</li>
<li>Understanding of Active/Active and Active/Passive architecture concepts.</li>
<li>Ability to define and implement Smart Rules, onboarding rules, and role-based access controls.</li>
<li>Troubleshoot RDP/SSH launch issues and connectivity problems.</li></ul></div>

Senior Security Engineer - (BTPAM/PMUL)

Holland & Barrett International Limited

About the role: At Holland & Barrett, cybersecurity is at the heart of our digital transformation. As we continue to grow and innovate, securing our applications and protecting customer data is a top priority. We are looking for a Senior Application Security Engineer to lead our efforts in strengthening application security, mitigating risks, and ensuring best-in-class security practices. If you are passionate about cybersecurity and eager to make a real impact, we want you on our team! Key Responsibilities: <ul> <li>Security Strategy: Help define and execute the Holland & Barrett application security strategy. Collaborate with both tech and non-tech teams to integrate security principles into the early stages of product design and development.</li><li>Secure SLDC: Establish a secure Software Development Lifecycle (SDLC) that enables development teams to deliver high-quality applications quickly while implementing essential controls for software integrity, authenticity, and third-party library management.</li><li>Risk Assessments: Conduct risk assessments, threat modeling, and architecture reviews alongside development teams, producing artifacts to drive the implementation of effective security controls.</li><li>Standards Development: Own the creation and maintenance of tailored security standards and guidelines, developing reusable resources for various development teams.</li><li>Team Support: Provide guidance and support to development teams on secure software production practices and flaw mitigation strategies.</li></ul> Key requirements: Essential: <ul> <li>5+ years of experience in application security, with at least 3+ years in software development.</li><li>Strong understanding of application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, and API Security (including authentication and authorization).</li><li>Proficiency in programming languages such as Python, Java, JavaScript, GoLang, and Rust.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to oversee multiple security projects simultaneously.</li></ul> Desired: <ul> <li>Independent, proactive, and detail-oriented, with a commitment to maintaining high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> What we offer: What we offer: Wellbeing & Lifestyle Benefits <ul> <li>Health Cash Plan </li><li>Life Assurance</li><li>Incentive Scheme - Based on company & personal performance</li><li>Virtual GP </li><li>Private Medical care</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution scheme</li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> Discounts & Savings <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> Learning & Development <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> Our culture respects equality, values diversity and encourages individuality - because this allows our people to unlock their potential and be their best. We welcome everyone who shares our EPIC values regardless of background, culture, disability, ethnicity, gender identity or sexual orientation Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).

Senior Application Security Engineer

MNR solutions pvt.ltd

Senior Cloud Security Engineer &ndash; GCPLocation: Mumbai Experience Required: 8+ years (Minimum 4 years in GCP mandatory) Notice Period: Immediate to 15 DaysWe are hiring a Senior Cloud Security Engineer with strong hands-on expertise in Google Cloud Platform security. The ideal candidate should have deep experience in cloud security, network security, IAM, RBAC, audits, compliance, Prisma Cloud, and Terraform. This role requires someone who can independently manage cloud security operations and strengthen the overall security posture.Key Responsibilities<ul><li>Implement and manage cloud security controls in GCP</li><li>Configure IAM, RBAC, service accounts, and security roles</li><li>Manage network security including VPCs, firewalls, and security groups</li><li>Support compliance, audits, and security assessments</li><li>Use Prisma Cloud and GCP security tools for monitoring and governance</li><li>Build secure infrastructure using Terraform</li><li>Identify and remediate vulnerabilities</li><li>Work with cross-functional teams on secure architecture and deployments</li></ul>Must Have Skills<ul><li>4+ years hands-on GCP experience</li><li>8+ years overall IT or Security experience</li><li>Cloud security, network security, IAM, RBAC</li><li>Security audits and compliance</li><li>Terraform</li><li>Prisma Cloud</li><li>Strong understanding of GCP security best practices</li></ul>Good to Have<ul><li>Experience in AWS or Azure</li><li>Certifications in cloud or security</li></ul>Job Type: Full-time

Senior Cloud Security Engineer – GCP

International Turnkey Systems - ITS

<div>
 
 We are looking for an Application Security Engineer to join us for a
 
 Three- Months project
 
 
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 <ul>
 <li>
 Conduct in-depth manual penetration tests, identifying vulnerabilities in Web/Mobile Applications, Thick Clients, On-Prem and Cloud Infrastructures
 </li>
 <li>
 Conduct application security assessments, identify vulnerabilities and properly document findings and provide improvement recommendations.
 </li>
 <li>
 Conduct threat modelling, code review and application security design review for newly published and already developed applications.
 </li>
 <li>
 Reporting on findings and vulnerabilities including presenting results to non-technical managers
 </li>
 <li>
 Develop customized tools and automation scripts to improve identification of vulnerabilities at scale
 </li>
 <li>
 Detailed analysis of issues identified and exposure for the management including proof of concept, reproduction steps, and recommended remediation.
 </li>
 <li>
 Assisting in the continual development of the team and service through research and development activities. This includes the development of in-house tools the implementation of tools released to the community, and design and documentation of new and existing internal systems and processes.
 </li>
 <li>
 Undertaking projects and support tasks as appropriate to the role.
 </li>
 </ul>
 
 
 
 
 
 
 Minimum Qualifications
 
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in information technology, Computer Science, or related field.
 </li>
 <li>
 3-5 years of professional experience in project management.
 </li>
 <li>
 Knowledge of cybersecurity organization practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities, including incident response methodologies
 </li>
 </ul>
 
 
 
 
 
 Core computing skills:
 
 
 <ul>
 <li>
 Networking fundamentals &ndash; understanding of OSI Model, TCP/IP, HTTP, DNS, SMB, SMTP and relevant tools.
 </li>
 <li>
 Microsoft Windows and Office proficiency along with proficiency in one or more Linux distributions.
 </li>
 <li>
 Strong knowledge of web application technologies and security assessment including but not limited to: REST APIs, SOAP APIs, XML and JSON formats.
 </li>
 <li>
 Vulnerability identification and exploitation (not limited to OWASP Top 10).
 </li>
 <li>
 Experience with common assessment tools such as MITM proxies (e.g. Burp Suite Pro) and SQLMap.
 </li>
 <li>
 Good knowledge of internal and external infrastructure technologies and security assessment including but not limited to:
 </li>
 <li>
 Identification and exploitation of misconfigurations or known vulnerabilities in common enterprise infrastructure and services (Windows Domains, Linux servers, virtualization, databases, switches/routers, etc).
 </li>
 <li>
 Knowledge of a scripting language such as Python (preferred), Ruby, PowerShell, or Bash, for the development of new, or editing existing, tools.
 </li>
 <li>
 Evidence of rapidly and confidently gaining knowledge of, and applying knowledge of, emerging technologies, vulnerabilities, and penetration testing tools and techniques.
 </li>
 <li>
 Excellent time management including setting priorities and goals to complete assigned and arising tasks.
 </li>
 <li>
 Excellent report writing and presentation skills
 </li>
 </ul>
 
 
 
 
 
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Proficiency in security concepts for both Windows and Unix-like Operating Systems
 </li>
 <li>
 Experience in source code review and/or building software with multiple programming languages (i.e. Python, Java, Rust, etc.)
 </li>
 <li>
 Experience in reverse engineering standalone, thick client and mobile applications
 </li>
 <li>
 Certifications like CREST (CRT, CCT), OSCP, GWAPT, OSCE, GXPN.
 </li>
 </ul>
 
 
</div>

About the role: Join Our Team at Holland & Barrett! Are you passionate about cloud security and looking to make a significant impact? Holland & Barrett is seeking a Cloud Security Specialist to help us define and implement our cloud security strategy. If you're an experienced professional eager to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you! Key Responsibilities: <ul> <li>Security Strategy: Help define and execute the Holland & Barrett cloud security strategy, partnering with platform and Site Reliability Engineering (SRE) teams to build robust infrastructure that supports our business.</li><li>Perimeter Security: Establish platform perimeter security by implementing controls at ingress and egress points, including creating and maintaining an edge network with a Web Application Firewall (WAF), Distributed Denial of Service (DDoS) protection, and a Content Delivery Network (CDN).</li><li>Access Control: Establish an access control baseline focusing on the principle of least privilege and segregation of duties. Monitor and enforce these controls once roles and permissions are set.</li><li>Security Controls: Design, implement, and maintain security controls to prevent, detect, and remediate insecure configurations, including defining and disseminating secure AWS/infrastructure baselines.</li><li>Standards Development: Own the development and maintenance of tailored security standards and guidelines, creating reusable resources for various development teams.</li><li>AWS Security Services: Establish and manage AWS security services, including certificate authorities, encryption services, insecure configuration scanners, and security control canaries.</li></ul> Key requirements: Essential: <ul> <li>5+ years of experience in cloud security, particularly with AWS, and at least 2+ years in software development.</li><li>Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, API gateways, and API Security (authentication and authorization).</li><li>Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and AWS CDK.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to manage multiple security projects effectively.</li></ul> Desired: <ul> <li>Ability to work independently, take initiative, and maintain a keen attention to detail, ensuring high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> Why Holland & Barrett? At Holland & Barrett, we are dedicated to promoting health and well-being while ensuring the highest standards of cloud security. Join our team and be part of a company that values innovation and security. Ready to Make an Impact? If you're excited about cloud security and want to contribute to a secure future, apply now! We look forward to welcoming you to our team. We support flexibility and productivity of our employees by hybrid working arrangements. Although your role will be based in London (or Nuneaton, or Amsterdam) you will be required to travel only occasionally to our Hubs in Nuneaton or London or to any other location of H&B. What we offer: Benefits Wellbeing & Lifestyle Benefits <ul> <li>Health Cash Plan </li><li>Life Assurance </li><li>Incentive Scheme</li><li>Virtual GP </li><li>Private Medical</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution </li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> Discounts & Savings <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> Learning & Development <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B. Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).

Senior Cloud Security Engineer

Search 10000+ Senior security engineer jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 senior security engineer jobs NEAR_ME

Senior Security Engineer

Senior Security Engineer II

Senior Security Engineer - (BTPAM/PMUL)

Senior Application Security Engineer

Senior Cloud Security Engineer – GCP

Senior Application Security Engineer

Senior Cloud Security Engineer