Associate Security Engineer

• Pioneering Technology: At Coupa, we're at the forefront of innovation, leveraging the latest technology to empower our customers with greater efficiency and visibility in their spend.
• Collaborative Culture: We value collaboration and teamwork, and our culture is driven by transparency, openness, and a shared commitment to excellence.
• Global Impact: Join a company where your work has a global, measurable impact on our clients, the business, and each other. 

What You'll Do:

• Support the design and implementation of multi-cloud security controls — VPC segmentation, security groups/NACLs, and least-privilege IAM policies — on well-scoped tasks, with guidance from senior engineers. Build familiarity with permission boundaries and Organizations/SCPs along the way.
• Contribute to policy as code and IaC security guardrails in CI/CD pipelines: write and tune rules, reduce false positives, and help keep pre-merge and pre-deploy checks reliable.
• Assist in hardening containerized workloads and Kubernetes clusters, including image scanning, admission control, pod security standards, and network policies.
• Triage vulnerability findings from application packages, container images, and third-party dependencies. Gather context on exploitability and business impact, and escalate complex or ambiguous findings to senior teammates.
• Help the Risk & Compliance team gather technical evidence for audit frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP), and learn what auditable evidence looks like.
• Write and maintain scripts and small automations that make security work faster and more repeatable.
• Learn from mentors through pairing, design reviews, and feedback on your remediation plans. Document what you learn and help improve runbooks.
• Support the secure design, deployment, and operational monitoring of enterprise AI systems, models, and agentic workflows.
• Help design and develop internal AI-driven security tools, automation scripts, and guardrails to improve threat detection and vulnerability remediation.

What You Will Bring to Coupa:

• 0–2 years of experience in security, cloud, DevOps, IT, or software engineering. Internships, co-ops, research, and hands-on personal or lab projects count.
• Foundational knowledge of cloud security concepts (AWS, GCP, or Azure) — IAM, networking, and common misconfigurations — gained through work, coursework, labs, or certifications.
• Working scripting skills in Python, Bash, or JavaScript, and interest in building or extending internal security tooling.
• Familiarity with vulnerability scanning concepts (dependency and container scanning). Exposure to CI/CD pipelines is a plus.
• Basic awareness of common compliance frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP) and a willingness to learn how they translate into technical controls.
• Curiosity and a habit of asking why — you want to understand the cause of a vulnerability, not just what the scanner reported.
• Clear written and verbal communication, and comfort asking questions, asking for help, and escalating early.
• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience (bootcamps, military, self-directed learning, or similar).
• Entry-level certifications are a plus: Security+, ISC2 CC, AWS Cloud Practitioner or AWS/GCP/Azure security certifications.