Security Engineer III
BengaluruOn-siteStaff/Principal
Applicants who checked fit first are 3.1× more likely to hear back
Before you apply
The post's words + ASAI's dataOn-site in Bengaluru.
OK with that?6–10 years asked. Security Engineer roles in Bengaluru usually ask 3-8; 2 in 5 ask 6+.
You have them?No pay range in the post.
Not a repost. 3 of CommerceIQ's last 4 posts were reposts; all 3 of its open roles are here.
170 Security Engineer roles posted in Bengaluru this week, 1,697 open. See them →
Skills listed in the post · tap the ones you have · 0 of 8
You almost certainly match several of these already.
This post sets 2 stated bars and lists 8 skills. Tap where you stand - nothing is saved, no account needed.
ASAI checks this on every job for you, automatically, so you apply where you fit.
Fit Breakdown
ExampleHow an ASAI match score looks. Yours is built from your resume, not a guess.
Your score for this role already exists - sign in to view it
ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.
Always free · no credit card · 1 tap with Google
Tools on this job
60-Day PassStarts free · 60-Day Pass ₹149 for 60 days, GST included
Free account, no card needed.
The job post
438 words · from CommerceIQ's careers siteThe Company
CommerceIQ is building the AI platform that runs commerce for the world's largest brands. We are not selling AI demos. We are shipping AI agents for content, media, and sales into the workflows of the Fortune 100 every week.
Customers include Coca-Cola, Nestlé, Colgate-Palmolive, Mondelez, Samsung, and Kellogg's. Backed by SoftBank, Insight Partners, and Madrona. Headquartered in Mountain View with teams across the US, India, Canada, and the UK. Pre-IPO.
About the Role :
We are looking for a hands-on Security Engineer III to strengthen our cloud, application, and infrastructure security. You will work closely with Engineering, DevOps, and IT teams to identify risks, implement security controls, automate security processes, and ensure compliance as we scale.
Key Responsibilities :
• Cloud Security: Secure AWS and GCP environments, including IAM, network security, encryption, logging, and access controls.
• Application Security: Perform security reviews, vulnerability assessments, penetration testing coordination, and remediation tracking.
• DevSecOps: Integrate security scanning into CI/CD pipelines, including SAST, DAST, dependency scanning, container scanning, and IaC scanning.
• Infrastructure Security: Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.
• Security Monitoring: Improve threat detection, security logging, alerting, incident response, and investigation processes.
• Vulnerability Management: Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies.
• Compliance: Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.
• Security Automation: Build scripts and tools to automate security checks, reporting, and remediation.
• Incident Response: Investigate security incidents, perform root-cause analysis, and implement preventive measures.
• Cross-functional Collaboration: Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.
Required Skills :
• 6–10 years of experience in information security, cloud security, application security, or DevSecOps.
• Strong hands-on experience with AWS and/or GCP security.
• Good understanding of IAM, least-privilege access, secrets management, encryption, and network security.
• Experience integrating security tools into CI/CD pipelines.
• Familiarity with tools such as SonarQube, Snyk, Trivy, Checkov, Wiz, or equivalent.
• Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
• Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
• Experience with vulnerability management, security incident response, and risk assessment.
• Scripting skills in Python, Bash, or similar languages.
• Understanding of SOC 2 or ISO 27001 requirements.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any other category prohibited by applicable law.
Free · no signup
Get tomorrow's jobs before you have to search
