Senior Security Engineer

The role

You will own and advance security across AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure-as-code environments. You will investigate cloud-security problems, design secure solutions, and manage identity and access management. You will also lead risk triage, build automation, and support incident investigations.

What you will do

• Own cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure services.
• Investigate complex misconfigurations and attack paths.
• Partner with engineering teams to design secure, scalable solutions.
• Perform security reviews for cloud services, infrastructure designs, network patterns, and data flows.
• Review Terraform and CI/CD workflows and develop preventive controls.
• Strengthen secure-by-default patterns for cloud accounts, workloads, networking, and storage.
• Evaluate AWS IAM, GCP service accounts, workload identity, and privileged access.
• Assess Kubernetes RBAC, workload identity, admission controls, and network policies.
• Drive adoption of golden images and timely remediation of vulnerabilities.
• Lead risk-based triage of Wiz and other cloud-security findings.

Required qualifications

• 5+ years of experience in security, infrastructure, platform engineering, or a related technical field.
• 4+ years of hands-on cloud-security experience.
• Deep practical knowledge of AWS/GCP in production environments.
• Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
• Hands-on expertise in cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
• Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
• Experience using a CSPM platform such as Wiz to investigate and prioritize risk.
• Ability to automate security workflows using Python, Go, APIs, or similar technologies.
• Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
• Demonstrated ability to own ambiguous problems, work independently, and drive cross-functional remediation to measurable completion.
• Excellent written and verbal English communication skills.

Nice to have

• Experience mentoring engineers or leading technical initiatives across multiple teams
• AWS Certified Security - Specialty
• Google Professional Cloud Security Engineer
• CKS
• CISSP
• equivalent practical experience

Benefits

• Group Medical, Personal Accident, and Term Life Insurance
• Preventive healthcare covering dental, vision, and OPD needs
• Mental health support
• Fitness benefit
• Car lease policy
• Gratuity

About the company

Demandbase is a pipeline AI platform that empowers GTM teams to automate growth at scale. The company has offices in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.