Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Security Engineer

Home > Python programming jobs

Staff Security Engineer in Others new

  • CodeRabbit
  • Full time
  • Email
  • Bengaluru, India

Responsibilities

  • Define and drive the technical security roadmap, prioritizing initiatives by customer impact, threat exposure, and business needs.
  • Lead threat modeling and security architecture reviews while building reusable security patterns, guardrails, and automated checks.
  • Improve cloud security across GCP, GKE/Kubernetes, and serverless workloads, including network isolation, workload identity, secrets, encryption, key management, containers, and infrastructure-as-code controls.
  • Lead IAM improvements covering least privilege, SSO/MFA, privileged access, service accounts, credential lifecycle management, and access reviews.
  • Build and operate security detections using audit logs, identity events, application telemetry, and endpoint signals; develop SIEM detections, tune alerts, and investigate suspicious activity.
  • Lead technical incident response through triage, investigation, containment, eradication, recovery, exercises, root-cause remediation, and post-incident improvements.
  • Plan and execute authorized offensive assessments, red-team exercises, and adversary emulation across applications, APIs, cloud, and enterprise environments.
  • Assess risks in AI and agentic systems, including prompt injection, tool and connector abuse, excessive permissions, RAG/vector-store poisoning, sensitive-data leakage, and model trust boundaries.
  • Build security tooling and automation in Python, Go, or similar languages and integrate preventive controls and security testing into engineering workflows.
  • Improve vulnerability management and bug bounty or responsible-disclosure triage, focusing on exploitability, ownership, timelines, and recurring weaknesses.
  • Mentor engineers, lead cross-team technical decisions, communicate security tradeoffs, and partner with compliance teams on documented controls.

Requirements

  • Typically 8+ years of relevant security engineering experience or equivalent demonstrated depth and impact.
  • Strong hands-on cloud and infrastructure security experience, including Kubernetes, networking, secrets and key management, infrastructure as code, and deep expertise in at least one major cloud provider; GCP is particularly relevant.
  • Practical IAM expertise across workforce and workload identities, least privilege, federation, service accounts, privileged access, credential management, and identity-based attack investigations.
  • Experience building and validating security detections, using SIEM and cloud audit telemetry, investigating incidents, and leading response under pressure.
  • Strong application and offensive security skills demonstrated through findings, penetration tests, vulnerability research, responsible disclosures, bug bounty work, or security tooling.
  • Strong programming and automation skills, including the ability to build maintainable tools and contribute to production code and infrastructure changes.
  • Ability to reason through attack chains and trust boundaries and use frameworks such as MITRE ATT&CK.
  • Proven ability to navigate ambiguity, influence architecture without direct authority, mentor engineers, and deliver measurable improvements across organizational boundaries.
  • Clear written and verbal communication, sound judgment, and ability to explain risk and practical tradeoffs to technical and non-technical audiences.
  • Preferred experience securing AI/ML, LLM, RAG, or multi-agent systems, including OWASP guidance for LLM applications and AI red-team practices.
  • Preferred experience securing developer platforms, source-code integrations, CI/CD pipelines, software supply chains, and customer credentials or tokens.
  • Preferred experience with threat hunting, digital forensics, endpoint security, detection-as-code, SOC 2, ISO 27001, security research, open-source tooling, responsible disclosure communities, or conference talks; relevant practical certifications are a plus.

Benefits

  • Competitive salary, equity, and benefits.
  • Professional development opportunities.
  • Opportunity to work on cutting-edge technology with real-world impact in a collaborative and innovative environment.

Salary: Competitive

CodeRabbit

CodeRabbit is an innovative, AI-driven platform that transforms the way code reviews are done. It delivers context-aware, human-like reviews, improving code quality, reducing the time and effort required for thorough manual code reviews, and enabling teams to ship software faster. Trusted by over...

Similar positions

Staff Machine Learning Engineer Risk

  • OKX
  • Full time
  • USA
  • 11/06/2026
  • San Jose, CA

Machine Learning Engineer

  • Pomelo
  • Full time
  • USA
  • 11/06/2026
  • Salary: Competitive
  • Remote

Senior Spacecraft Mission Software Engineer

  • Varda Space Industries
  • Full time
  • USA
  • 11/06/2026
  • Salary: $169k - $216k/yr
  • El Segundo, CA

Senior Software Engineer (Python)

  • Mitratech
  • Full time
  • Remote
  • 11/06/2026
  • United States

Full Stack Engineer

  • Namecheap Inc
  • Full time
  • Remote
  • 11/06/2026
  • Europe

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026