Security Engineer III
CommerceIQ · Bengaluru · onsite · Posted 7d ago
Undisclosed6–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
The Company
CommerceIQ is building the AI platform that runs commerce for the worlds largest brands. We are not selling AI demos. We are shipping AI agents for content, media, and sales into the workflows of the Fortune 100 every week.
2,200+
Customers
10 of Top 12
CPG Companies
900+
Retailers Connected
$200M+
Raised
Customers include Coca-Cola, Nestl , Colgate-Palmolive, Mondelez, Samsung, and Kelloggs. Backed by SoftBank, Insight Partners, and Madrona. Headquartered in Mountain View with teams across the US, India, Canada, and the UK. Pre-IPO.
About the Role :
We are looking for a hands-on Security Engineer III to strengthen our cloud, application, and infrastructure security. You will work closely with Engineering, DevOps, and IT teams to identify risks, implement security controls, automate security processes, and ensure compliance as we scale.
Key Responsibilities :
- Cloud Security: Secure AWS and GCP environments, including IAM, network security, encryption, logging, and access controls.
- Application Security: Perform security reviews, vulnerability assessments, penetration testing coordination, and remediation tracking.
- DevSecOps: Integrate security scanning into CI/CD pipelines, including SAST, DAST, dependency scanning, container scanning, and IaC scanning.
- Infrastructure Security: Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
- Security Monitoring: Improve threat detection, security logging, alerting, incident response, and investigation processes.
- Vulnerability Management: Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
- Compliance: Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
- Security Automation: Build scripts and tools to automate security checks, reporting, and remediation.
- Incident Response: Investigate security incidents, perform root-cause analysis, and implement preventive measures.
- Cross-functional Collaboration: Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.
Required Skills :
- 6-10 years of experience in information security, cloud security, application security, or DevSecOps.
- Strong hands-on experience with AWS and/or GCP security.
- Good understanding of IAM, least-privilege access, secrets management, encryption, and network security.
- Experience integrating security tools into CI/CD pipelines.
- Familiarity with tools such as SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent.
- Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
- Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
- Experience with vulnerability management, security incident response, and risk assessment.
- Scripting skills in Python, Bash, or similar languages.
- Understanding of SOC 2 or ISO 27001 requirements.
We are looking for a hands-on Security Engineer III to strengthen our cloud, application, and infrastructure security. You will work closely with Engineering, DevOps, and IT teams to identify risks, implement security controls, automate security processes, and ensure compliance as we scale.
Key Responsibilities :
- Cloud Security: Secure AWS and GCP environments, including IAM, network security, encryption, logging, and access controls.
- Application Security: Perform security reviews, vulnerability assessments, penetration testing coordination, and remediation tracking.
- DevSecOps: Integrate security scanning into CI/CD pipelines, including SAST, DAST, dependency scanning, container scanning, and IaC scanning.
- Infrastructure Security: Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
- Security Monitoring: Improve threat detection, security logging, alerting, incident response, and investigation processes.
- Vulnerability Management: Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
- Compliance: Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
- Security Automation: Build scripts and tools to automate security checks, reporting, and remediation.
- Incident Response: Investigate security incidents, perform root-cause analysis, and implement preventive measures.
- Cross-functional Collaboration: Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.
Required Skills :
- 6-10 years of experience in information security, cloud security, application security, or DevSecOps.
- Strong hands-on experience with AWS and/or GCP security.
- Good understanding of IAM, least-privilege access, secrets management, encryption, and network security.
- Experience integrating security tools into CI/CD pipelines.
- Familiarity with tools such as SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent.
- Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
- Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
- Experience with vulnerability management, security incident response, and risk assessment.
- Scripting skills in Python, Bash, or similar languages.
- Understanding of SOC 2 or ISO 27001 requirements.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationDevopsDockerTerraformBashGithubCI/CD Pipelinesgoogle cloud platformamazon web servicesencryptionauditsDevsecopsdastGithub ActionsCloud InfrastructureContainerGCP SecuritycloudCloud SecurityApplication SecuritycomplianceAi PlatformArtificial Intelligence
About CommerceIQ
CommerceIQ
Software Product
287
employees
2013
13 years old
Mountain View,California
United States
About
CommerceIQ provides an advanced e-commerce optimization platform utilizing AI and machine learning to enhance sales and operational efficiency for consumer brands.
Industries
Software ProductRetail
Employee ratings
102 reviews
2.8/ 5
Culture
2.9
Career growth
2.4
Work-life
2.6
Employees rate it well for
Work Culture19Work Life Balance19Senior Management14Salary13Learning10
Find them on