Security Engineer

Skills this role screens for

About the role

Coupa is hiring for the role of Security Engineer!

The work

Responsibilities of the Candidate

• Conduct penetration testing on web applications, mobile applications, AI/LLM systems, and APIs using traditional and AI-powered security tools.
• Perform specialized security assessments of AI and LLM integrations, including testing for prompt injection, jailbreaking, data poisoning, and model evasion.
• Develop, deploy, and manage AI agents for continuous and autonomous security testing and vulnerability discovery.
• Identify network and system vulnerabilities and recommend appropriate countermeasures and mitigating controls.
• Perform penetration testing, remediation testing, reporting, and advanced security assessments.
• Maintain, support, and extend application security tooling, standards, and processes, including SAST, DAST, WAF, and emerging AI-based security analysis platforms.
• Collaborate with cross-functional teams to implement security improvements and strengthen the organization's security posture.
• Translate complex technical security findings into actionable business risks for non-technical stakeholders and executive leadership.

Who they want

Requirements

• 1-2 years of experience in an equivalent security-related role with hands-on experience in AI-driven security testing.
• Strong experience in web and API security, particularly testing and defending AI/ML systems.
• Familiarity with cloud environments such as AWS, Azure, and GCP.
• Hands-on experience managing bug bounty programs.
• Proficiency in one or more scripting languages, preferably Python for AI/ML development.
• Knowledge of common application security vulnerabilities, including OWASP Top 10 and SANS Top 25.
• Familiarity with OWASP Top 10 for Large Language Models.
• Knowledge of penetration testing standards and frameworks such as PTES, OSSTMM, NIST, OSINT, and OWASP.
• Hands-on experience developing or utilizing autonomous and agentic systems for security penetration testing.
• Strong problem-solving, communication, and collaboration skills.
• Ability to work effectively in a team environment.
• Proven ability to build cross-functional relationships and drive security improvements.
• Relevant certifications such as CEH, OSCP, GPEN, LPT, or eJPT are a plus but not required.
• Bachelor’s or Master’s degree in Computer Science or equivalent experience.