Staff Security Engineer

Overview

Staff Security Engineer for Procore’s Security Engineering team, focused on building and operating foundational security controls for a cloud SaaS platform.

What you'll do

• Configure and support IAM guardrails for cloud and corporate identity environments.
• Implement and support automated pipelines for asset inventory and SBOM generation.
• Support data protection processes including key management and encryption.
• Implement secure configurations for Kubernetes/EKS and Terraform (IaC) workflows.
• Collaborate to test and document resilience patterns with Product & Technology teams.
• Assist GRC and Internal Audit teams with data gathering and context on security controls.
• Operate and triage alerts and help drive remediation; provide rotational on-call support.

What you'll need

• 8+ years of hands-on technical security or IT/ops experience with a security focus.
• Solid understanding of core security domains including IAM, network security, and infrastructure security.
• Hands-on experience with at least one major cloud provider (AWS preferred).
• Hands-on experience identifying and exploiting common web/API vulnerabilities and secure API design.
• Proficiency in scripting to automate security tasks or checks.
• Familiarity with IAM platforms (IdP, IGA, PAM) and JML concepts (SAML, OAuth 2.0, OIDC, SCIM).
• Understanding of data protection principles including encryption and key management.

Details

• Based in the Bengaluru, India office and joining immediately.