Lead Application Security Engineer, Coupa
$125-162k
Business spending management platform
Open for applications
Business spending management platform
1001+ employees
Open for applications
$125-162k
1001+ employees
Company mission
To provide a clear idea of business value for clients.
Role
Who you are
- Leadership & Experience: 2+ years as a Lead Software Engineer or Lead AppSec Engineer; able to independently drive projects from design through delivery
- Technical Expertise: Strong in Java, .NET, or Python; experienced building secure web applications/microservices and designing complex, distributed systems
- Security Architecture & Threat Modeling: Skilled in formal security architecture/design reviews and threat modeling methods (STRIDE, DREAD)
- Security Foundations: Deep knowledge of OWASP Top 10, SANS Top 25, identity and access management (SAML, OIDC, SSO), OAuth flows, and core cryptographic algorithms (DES, RSA, HMAC, SHA, etc.)
- Systems & Development Practices: Familiar with design patterns, scalability, high availability, concurrency, and SQL/NoSQL databases; strong communication, self-motivation, and continuous learning mindset
- Strong software development skills in languages such as Java, .Net, and Python
- Ability to perform code reviews and mentor junior team members
- Passion for building security-focused features that perform at scale
- Additional/Preferred Skills: Background in AI/ML security (MLOps, adversarial robustness), compliance frameworks (HIPAA, PCI, SOX, FedRAMP), plus conference presentations or open-source contributions
What the job involves
- We are looking for an extremely talented Lead Application Security Engineer to join our Application Security Team
- You will be part of a global agile group that is responsible for building the best-in-class SaaS platform, deployment infrastructure, and services
- The position will require a candidate to drive security architecture, perform design and threat modeling reviews, and design, develop, maintain, and scale Coupa’s security features and application security tooling
- This role is critical in ensuring the security of our cutting-edge, highly scalable platform, including the review and guidance for new technological domains such as Artificial Intelligence (AI) and Machine Learning (ML) systems
- Expand the application security landscape at Coupa
- Being a hands-on developer is a key responsibility in this role, with strong proficiency in secure coding practices
- Track vulnerability reports and contribute security fixes
- Design and implement application changes to meet security compliance requirements
- Lead and execute Security Architecture Reviews, Threat Modeling, and Design Reviews for new and existing platform components to proactively identify and mitigate security risks
- Conduct Security Reviews for AI/ML models and systems, addressing unique risks associated with data integrity, model poisoning, privacy, and adversarial attacks
- Evaluate new security technologies and make recommendations to strengthen our application
- Be a champion of Coupa’s Secure Software Development Lifecycle (SSDLC) methodologies, integrating security earlier into the development pipeline
- Work closely with the Operations Security team to review and define our best practices
Our take
In 2006, Noah Eisner co-founded Coupa with Ravi Thakur, two fintech start-up specialists, as a provider of business spending management (BSM) services. Coupa has grown into its niche with a comprehensive platform that enables companies to gain greater control over their spending, supply networks, chain optimisation, liquidity management and payment solutions.
Coupa has been recognised as a leading brand in third-party risk management (TPRM). Using artificial intelligence software, its TPRM software takes data from hundreds of sources and generates risk flags across the entire platform, informing the user’s processing decisions.
TPRM integrates into Coupa’s business spending management systems to provide one comprehensive platform, a feat that gives it a definitive edge when it comes to secure management of company funds. Acquired in early 2023 by Thoma Bravo, Coupa is a company to watch, as progress in AI software could open opportunities for greater software automation on its platform.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jun 2015
$80m
SERIES G
Mar 2014
$40m
SERIES F
Total funding: $169m
Company benefits
- Employee stock purchase program
- Health benefits for employees and their families
- Retirement and savings plans
- Flexible work environment
Company HQ
Town Center, Foster City, CA
Leadership
Leagh Turner
(CEO & Board Of Directors)Previously on the Board of Directors at Plan International Canada, was the Co-CEO of Ceridian and was COO at SAP.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 9 more jobs at Coupa