{"id":2428375,"url":"https://alion.io/job/demandbase-senior-security-engineer","title":"Senior Security Engineer","company":{"id":4490,"name":"Demandbase","domain":"demandbase.com","url":"https://alion.io/company/demandbase","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":41000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-13T07:29:22Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T03:26:21Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Introduction to Demandbase:\nDemandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks - all in one platform.\nAs a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.\nAbout The Role\nDemandbase is seeking a hands-on Senior Security Engineer to join our Product Security team. In this role, you will own and advance security across our AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure-as-code environments. You will evaluate real attack paths, translate cloud risk into practical engineering action, and help prevent recurring issues through secure architecture, automation, and guardrails.\nYou'll partner closely with Cloud Engineering, SRE, Platform, Infrastructure, Product Engineering, and Security Incident Response teams. This is an ownership-oriented role for an engineer who can independently investigate complex cloud-security problems, prioritize risk based on exploitability and business impact, drive remediation to closure, and communicate clearly with both engineers and leaders.\nThis position offers an opportunity to shape cloud-security engineering at scale, reduce systemic risk across a modern multi-cloud environment, mentor developing security engineers, and grow toward broader technical leadership.\nWhat you'll be doing\nCloud Security Ownership\nOwn cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and supporting infrastructure services.\n\nIndependently investigate complex misconfigurations and attack paths, determine actual exposure, and drive issues from discovery through verified closure.\n\nPartner with engineering teams to design secure, scalable solutions instead of relying only on tickets or compensating controls.\n\nArchitecture and Infrastructure-as-Code\nPerform security reviews for new cloud services, infrastructure designs, network patterns, data flows, and high-risk architectural changes.\n\nReview Terraform and CI/CD workflows, and develop preventive controls that identify or block insecure infrastructure before deployment.\n\nStrengthen secure-by-default patterns for cloud accounts, projects, workloads, networking, storage, secrets, encryption, logging, and service-to-service access.\n\nIdentity and Access Management\nEvaluate AWS IAM, GCP service accounts, workload identity, federation, trust relationships, and privileged access against least-privilege principles.\n\nReduce excessive permissions, long-lived credentials, dormant identities, insecure keys, privilege-escalation paths, and cross-account or cross-project trust risks.\n\nKubernetes, Containers, and Compute Security\nAssess Kubernetes RBAC, workload identity, admission controls, network policies, secrets handling, runtime configurations, and cluster or workload isolation.\n\nDrive adoption of Demandbase-owned golden images, secure base images, automated upgrades, and timely remediation of critical and high-risk operating-system and package vulnerabilities.\n\nImprove the health of active container images and virtual machines while prioritizing resources that create meaningful production exposure.\n\nRisk Triage, Automation, and Metrics\nLead risk-based triage of Wiz and other cloud-security findings; validate exploitability, identify root cause, recommend practical remediation, and eliminate avoidable noise.\n\nBuild scripts, integrations, guardrails, dashboards, and automated remediation workflows for recurring cloud-security problems.\n\nDefine and report outcome-oriented metrics for external exposure, IAM risks, Kubernetes issues, unhealthy VMs and container images, remediation aging, and recurrence.\n\nIncident Support and Technical Leadership\nSupport cloud incident investigations with attack-path analysis, evidence collection, blast-radius assessment, containment guidance, and durable corrective controls.\n\nRepresent Product Security in technical discussions and risk escalations, influence teams without direct authority, and communicate trade-offs clearly.\n\nMentor security and engineering team members, document reusable patterns, and help develop reliable secondary owners for cloud-security domains.\n\nWhat we're looking for\n5+ years of experience in security, infrastructure, platform engineering, or a related technical field, including 4+ years of hands-on cloud-security experience.\n\nDeep practical knowledge of AWS/GCP in production environments.\n\nStrong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.\n\nHands-on expertise in cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.\n\nExperience reviewing or developing Terraform and integrating security controls into CI/CD workflows.\n\nExperience using a CSPM platform such as Wiz to investigate and prioritize risk; the ability to go beyond tool output and validate technical impact is essential.\n\nAbility to automate security workflows using Python, Go, APIs, or similar technologies.\n\nStrong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.\n\nDemonstrated ability to own ambiguous problems, work independently, and drive cross-functional remediation to measurable completion.\n\nExcellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.\n\nExperience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.\n\nRelevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.\n\nBenefits\nOur benefits include Group Medical, Personal Accident, and Term Life Insurance for comprehensive protection. Preventive healthcare covers dental, vision, and OPD needs, complemented by strong mental health support. We also provide a fitness benefit, car lease policy, and gratuity for long-term financial well-being.\nOur Commitment to Diversity, Equity, and Inclusion at Demandbase\nAt Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis.\nWe recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!\nWe acknowledge that true diversity and inclusion requires ongoing effort, and we are committed to doing the work required to make our workplace a safe and equitable space for all. Join us in building a community where we can learn from each other, celebrate our differences, and work together.\nUnsolicited Submissions\nAt Demandbase, we value thoughtful partnerships and direct connections with candidates. We’re not accepting unsolicited resumes or outreach from third-party recruiting agencies. Any unsolicited submissions will not be reviewed, and no fees will be paid.","description_format":"text","description_chars":8395,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Car lease","Equity","Life insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Sales Enablement","Marketing Automation","Lead Generation"],"lifecycle":[{"event":"open","at":"2026-10-13T08:18:18Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":58,"reasons":["conf:1","win:early"],"computed_at":"2026-10-14T04:45:12Z"},"pay":null,"html_url":"https://alion.io/job/demandbase-senior-security-engineer","json_url":"https://alion.io/job/demandbase-senior-security-engineer.json","meta":{"generated_at":"2026-10-14T04:45:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6608,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4490},"rest":"https://alion.io/mcp/rest/get_company?id=4490"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdemandbase-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdemandbase-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdemandbase-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/demandbase-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdemandbase-senior-security-engineer"}]}