# Senior Security Engineer at Demandbase > Hybrid · India · Senior · Security · open. Source: https://alderhq.app/jobs/ashby%3Ademandbase%3A1790eca3-31e0-497f-a9e4-45f2c3fd7f60 (read 2026-11-07). ## Facts (observed) - Company: [Demandbase](https://alderhq.app/companies/demandbase) - Location text: Hyderabad - Where it can be done from (inferred): Hybrid · India (evidence: "Location lists "hyderabad"") - Posted: 2026-10-13 (25 days ago) - First seen by alder: 2026-11-02 · last verified: 2026-11-04 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://jobs.ashbyhq.com/demandbase/1790eca3-31e0-497f-a9e4-45f2c3fd7f60 - Skills listed (inferred): AWS, GCP, Kubernetes, Docker, Terraform ## Pay and sponsorship - Posted pay: not posted - Market band for similar posted roles (India, n 27): p25 $87k, median $87k, p75 $87k - H-1B filings at this company for similar roles, FY26: 4, median offered wage $233k ([US DOL OFLC LCA disclosure data](https://www.dol.gov/agencies/eta/foreign-labor/performance)) - Licensed UK sponsor: registered as "Demandbase Limited" (checked 2026-11-03, [register](https://www.gov.uk/government/publications/register-of-licensed-sponsors-workers)) ## Description (the employer's text) ### Introduction to Demandbase Demandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks – all in one platform. As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom. ### About The Role Demandbase is seeking a hands-on Senior Security Engineer to join our Product Security team. In this role, you will own and advance security across our AWS, GCP, Kubernetes, containers, virtual machines, and infrastructure-as-code environments. You will evaluate real attack paths, translate cloud risk into practical engineering action, and help prevent recurring issues through secure architecture, automation, and guardrails. You'll partner closely with Cloud Engineering, SRE, Platform, Infrastructure, Product Engineering, and Security Incident Response teams. This is an ownership-oriented role for an engineer who can independently investigate complex cloud-security problems, prioritize risk based on exploitability and business impact, drive remediation to closure, and communicate clearly with both engineers and leaders. This position offers an opportunity to shape cloud-security engineering at scale, reduce systemic risk across a modern multi-cloud environment, mentor developing security engineers, and grow toward broader technical leadership. ### What you'll be doing ### Cloud Security Ownership Own cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and supporting infrastructure services. Independently investigate complex misconfigurations and attack paths, determine actual exposure, and drive issues from discovery through verified closure. Partner with engineering teams to design secure, scalable solutions instead of relying only on tickets or compensating controls. ### Architecture and Infrastructure-as-Code Perform security reviews for new cloud services, infrastructure designs, network patterns, data flows, and high-risk architectural changes. Review Terraform and CI/CD workflows, and develop preventive controls that identify or block insecure infrastructure before deployment. Strengthen secure-by-default patterns for cloud accounts, projects, workloads, networking, storage, secrets, encryption, logging, and service-to-service access. ### Identity and Access Management Evaluate AWS IAM, GCP service accounts, workload identity, federation, trust relationships, and privileged access against least-privilege principles. Reduce excessive permissions, long-lived credentials, dormant identities, insecure keys, privilege-escalation paths, and cross-account or cross-project trust risks. ### Kubernetes, Containers, and Compute Security Assess Kubernetes RBAC, workload identity, admission controls, network policies, secrets handling, runtime configurations, and cluster or workload isolation. Drive adoption of Demandbase-owned golden images, secure base images, automated upgrades, and timely remediation of critical and high-risk operating-system and package vulnerabilities. Improve the health of active container images and virtual machines while prioritizing resources that create meaningful production exposure. ### Risk Triage, Automation, and Metrics Lead risk-based triage of Wiz and other cloud-security findings; validate exploitability, identify root cause, recommend practical remediation, and eliminate avoidable noise. Build scripts, integrations, guardrails, dashboards, and automated remediation workflows for recurring cloud-security problems. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/ashby%3Ademandbase%3A1790eca3-31e0-497f-a9e4-45f2c3fd7f60 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.