Demandbase, Inc.
More roles at Demandbase, Inc.Senior Security Engineer
Part remote, part office, you need to live within commuting distance of a named location.
Hybrid · Hyderabad
Employer listed it 2 weeks ago · Added 12 days ago
Been open since 2 weeks ago, still being checked, but it has been live a while.
Salary
Not stated
Location
Hybrid · Hyderabad
Timezone
Not stated
Contract
Full-time
Experience
Senior
Category
Software
The employer did not publish a salary, and we have too few comparable roles to estimate one.
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.
- Contract
- Not mentioned in the advert
- Experience asked for
5+ years of experience in security, infrastructure, platform engineering, or a related technical field, including 4+ years of hands-on cloud-security experience.
- Pay
- Not mentioned in the advert
Remote flexibility
Hybrid
This role is only partly remote, the employer expects time in the office around Hyderabad, Hybrid, so you need to live within commuting distance.
What the employer says
- Source listing states candidate location: "Hyderabad, Hybrid"
- Listing mentions "Hybrid"
What Nomaders makes of it
- Not suitable if you plan to move between countries
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Experience: employer states
Written as a requirement
- “Experience using a CSPM platform such as Wiz to investigate and prioritize risk; the ability to go beyond tool output and validate technical impact is essential.”
- “If you feel you have the level of experience to be successful in the role, we encourage you to apply!”
Written as a nice-to-have
- “Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.”
- “Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.”
Questions worth asking: Nomaders interpretation
- This role involves office time, but the advert does not say how often. Ask how many days a week are expected on site.
- No pay is stated. Ask for the salary range before investing time in interviews.
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
Introduction to Demandbase:
Demandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks – all in one platform.
As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.
About The Role
Demandbase is seeking a hands-on Senior Security Engineer to join our Product Security team. In this role, you will own and advance security across our AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure-as-code environments. You will evaluate real attack paths, translate cloud risk into practical engineering action, and help prevent recurring issues through secure architecture, automation, and guardrails.
You'll partner closely with Cloud Engineering, SRE, Platform, Infrastructure, Product Engineering, and Security Incident Response teams. This is an ownership-oriented role for an engineer who can independently investigate complex cloud-security problems, prioritize risk based on exploitability and business impact, drive remediation to closure, and communicate clearly with both engineers and leaders.
This position offers an opportunity to shape cloud-security engineering at scale, reduce systemic risk across a modern multi-cloud environment, mentor developing security engineers, and grow toward broader technical leadership.
What you'll be doing
Cloud Security Ownership
Own cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and supporting infrastructure services.
Independently investigate complex misconfigurations and attack paths, determine actual exposure, and drive issues from discovery through verified closure.
Partner with engineering teams to design secure, scalable solutions instead of relying only on tickets or compensating controls.
Architecture and Infrastructure-as-Code
Perform security reviews for new cloud services, infrastructure designs, network patterns, data flows, and high-risk architectural changes.
Review Terraform and CI/CD workflows, and develop preventive controls that identify or block insecure infrastructure before deployment.
Strengthen secure-by-default patterns for cloud accounts, projects, workloads, networking, storage, secrets, encryption, logging, and service-to-service access.
Identity and Access Management
Evaluate AWS IAM, GCP service accounts, workload identity, federation, trust relationships, and privileged access against least-privilege principles.
Reduce excessive permissions, long-lived credentials, dormant identities, insecure keys, privilege-escalation paths, and cross-account or cross-project trust risks.
Kubernetes, Containers, and Compute Security
Assess Kubernetes RBAC, workload identity, admission controls, network policies, secrets handling, runtime configurations, and cluster or workload isolation.
Drive adoption of Demandbase-owned golden images, secure base images, automated upgrades, and timely remediation of critical and high-risk operating-system and package vulnerabilities.
Improve the health of active container images and virtual machines while prioritizing resources that create meaningful production exposure.
Risk Triage, Automation, and Metrics
Requirements
The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.
Benefits
- ·Our Commitment to Diversity, Equity, and Inclusion at Demandbase
- ·We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!
- ·Unsolicited Submissions
How to apply
- 1Check the flexibility label above, hybrid, matches where you plan to live and work.
- 2Tailor your CV to the role at Demandbase, Inc., mentioning your remote working experience.
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 13d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open software roles with comparable remote rules.
Pay not stated · You'll be taken to the employer's careers page.