About the Role :

We are looking for an experienced and driven Security Engineer to join our Information Security team. You will plan, design, develop, test, and manage security tools and controls that protect and provide visibility across our cloud-based SaaS environments.

Key Responsibilities :

Security Architecture & Strategy :

- Architect and secure multi-tenant SaaS infrastructure, ensuring robust tenant isolation, data residency controls, and per-customer security boundaries

- Lead the design and implementation of preventative security controls leveraging automation and AI-driven capabilities

- Establish and evolve DevSecOps and Infrastructure-as-Code (IaC) security standards

SaaS & Customer Data Protection :

- Design and enforce security controls for SaaS-specific concerns including multi-tenancy, data segregation, API security, and identity federation

- Define data security and privacy controls to meet SaaS compliance requirements (SOC 2, ISO 27001, GDPR, CCPA)

- Establish security architecture for customer-facing APIs and integrations

Application Security & Emerging Threats :

- Identify and establish controls to mitigate cybersecurity risks

- Apply frameworks such as OWASP Top 10

- Expand security capabilities into next-generation domains such as AI/ML security, container security, and advanced threat detection

Container & Runtime Security :

- Define and implement security architecture for containerized SaaS workloads (Kubernetes/EKS/GKE/AKS)

- Lead evolution of cloud detection and response capabilities

Security Operations & Engineering :

- Architect and deliver automation frameworks and security services

- Maintain and monitor security operation infrastructure (IDS/IPS, SIEM, SAST, etc)

- Conduct and guide threat modeling and attack surface management

- Lead the implementation of vulnerability management and patch cadence processes

Technical Leadership :

- Provide technical mentorship to engineers and guide security-oriented thinking

- Train and mentor junior security staff

- Collaborate with Product, Compliance, and Customer Success to address enterprise customer security requirements

Qualifications :

- Bachelor's or Master's degree in Computer Science, Computer Engineering, Information Security, or related field

- 5 - 6 years of relevant professional experience

- Proven experience designing and securing large-scale cloud architectures in SaaS or cloud-native product environments (AWS, Azure, GCP)

- Deep expertise in cloud security architecture including IAM, network segmentation, encryption, secrets management, and secure design patterns

- Strong programming and automation skills (Ansible, Terraform)

- Extensive experience implementing DevSecOps practices and securing Infrastructure-as-Code (IaC) workflows

- Experience with container technologies (Kubernetes, Docker, GKE) and related security tooling

- Experience leading implementation and adoption of SIEM, SAST, DAST, IDS/IPS

- Familiarity with SaaS compliance frameworks : SOC 2 Type II, ISO 27001, ISO 27701, GDPR, CCPA, NIST CSF

- Experience with identity federation standards (SAML, OAuth 2.0, OIDC, SCIM)

- Deep understanding of OWASP Top 10 vulnerabilities

- Experience securing LLM integrations

- Relevant certifications preferred (e.g., ISC2 CISSP, AWS/GCP security specialty)