Senior Security Engineer

Introduction to Demandbase

Demandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks – all in one platform.

As a company, we're as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom.

About The Role

Demandbase is seeking a hands-on Senior Security Engineer to join our Product Security team. In this role, you will own and advance security across our AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure-as-code environments. You will evaluate real attack paths, translate cloud risk into practical engineering action, and help prevent recurring issues through secure architecture, automation, and guardrails.

You'll partner closely with Cloud Engineering, SRE, Platform, Infrastructure, Product Engineering, and Security Incident Response teams. This is an ownership-oriented role for an engineer who can independently investigate complex cloud-security problems, prioritize risk based on exploitability and business impact, drive remediation to closure, and communicate clearly with both engineers and leaders.

This position offers an opportunity to shape cloud-security engineering at scale, reduce systemic risk across a modern multi-cloud environment, mentor developing security engineers, and grow toward broader technical leadership.

What we're looking for

• 5+ years of experience in security, infrastructure, platform engineering, or a related technical field, including 4+ years of hands-on cloud-security experience.
• Deep practical knowledge of AWS/GCP in production environments.
• Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
• Hands-on expertise in cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
• Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
• Experience using a CSPM platform such as Wiz to investigate and prioritize risk; the ability to go beyond tool output and validate technical impact is essential.
• Ability to automate security workflows using Python, Go, APIs, or similar technologies.
• Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
• Demonstrated ability to own ambiguous problems, work independently, and drive cross-functional remediation to measurable completion.
• Excellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.
• Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.
• Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.