Application Security Engineer

Coupa Software (NASDAQ: COUP), a leader in business spend management (BSM), has been certified as a “Great Place to Work” by the Great Place to Work organization. We deliver “Value as a Service” by helping our customers maximize their spend under management, achieve significant cost savings and drive profitability. Coupa provides a unified, cloud-based spend management platform that connects hundreds of organizations representing the Americas, EMEA, and APAC with millions of suppliers globally. The Coupa platform provides greater visibility into and control over how companies spend money. Customers – small, medium and large – have used the Coupa platform to bring billions of dollars in cumulative spend under management. Learn more at www.coupa.com. Read more on the Coupa Blog or follow @Coupa on Twitter.
Do you want to work for Coupa Software, the world's leading provider of cloud-based spend management solutions? We’re a company that had a successful IPO in October 2016 (NASDAQ: COUP) to fuel our innovation and growth. At Coupa, we’re building a great company that is laser focused on three core values:
1. Ensure Customer Success – Obsessive and unwavering commitment to making customers successful.2. Focus On Results – Relentless focus on delivering results through innovation and a bias for action.3. Strive For Excellence – Commitment to a collaborative environment infused with professionalism, integrity, passion, and accountability.

About the role:

• Expand the application security landscape at Coupa
• Being a hands-on developer is a key responsibility in this role
• Software development skills in at least two from Ruby, Go, Java, Python and Javascript is required
• Ability to perform code reviews and mentor team members
• Passion for building security-focused features that perform at scale
• Track vulnerability reports and contribute security fixes
• Design and implement application changes to meet security compliance requirements
• Participate in the development and operational design reviews with a focus on application security
• Evaluate new security technologies and make recommendations to strengthen our application
• Be a champion of Coupa’s Secure Software Development Lifecycle (SSDLC) methodologies

About you:

• Good understanding of Information Security Concepts
• Knowledge of common application security issues (e.g. OWASP Top 10)
• Knowledge of identity management tools, SAML, OIDC, and SSO integrations
• Knowledge of OAuth and security best practices
• Knowledge of different algorithms like symmetric, PKI, and hashing algorithms.
• Demonstrated proficiency in coding, data structures, design principles, and programming concepts
• Good understanding of security/access control, scalability, high availability and concurrency
• Passionate about new technologies, trends, and eager to find ways to incorporate these new ideas into our solutions
• Self-motivated, go-getter, passion for learning, strong communication skills

Within 1 month, you will:

• Complete the onboarding program
• Get familiar with the people within and across teams
• Get a good understanding of Coupa Product and different functional areas
• Learn the basics of programming in Ruby and Go
• Learn about our Tech Stack, development and release processes
• Dive into technology by pair-programming with your teammates and attending engineering training sessions designed and presented by your peers

Within 3 months, you will:

• Learn the Security tools/devices used in Coupa
• Learn about application security issues (e.g. OWASP Top 10)
• Learn about secure coding practices
• Have a good understanding of identity management tools, SAML, OIDC, and SSO integrations
• Understand OAuth, all grant types and security best practices
• Learn about different security methodologies, including symmetric/asymmetric keys, PKI, hashing algorithms, and more.
• Learn about security compliance requirements
• Learn about Cloud Based Service Providers like AWS, Azure, GCP

Within 6 months, you will:

• Participate in the design process of security solutions
• Contribute to security fixes and fine-tune existing security tools
• Participate in the design reviews with a focus on application security
• Work with the team on feature design and development focussed on application security, and learn how to effectively collaborate with cross-functional teams
• Track vulnerability reports

Within 12 months, you will:

• Evaluate new security technologies and make recommendations to strengthen our application
• Contribute to the development and operational design reviews with a focus on application security
• Design and implement application changes to meet security compliance requirements
• Assist your peers with code reviews
• Provide application security training to the teams
• Work with third-party vendors/service providers

At Coupa, we have a strong and innovative team dedicated to improving the spend management processes of today’s dynamic businesses. It’s our people who make it happen, and we strive to attract and retain the best in every discipline.
We take care of our employees every way we can, with competitive compensation packages, as well as restricted stock units, an Employee Stock Purchase Program (ESPP), comprehensive health benefits for employees and their families, retirement and savings plans with employer match, a flexible work environment, no limit vacations for exempt employees, non-exempt employees are on an accrual basis for PTO, catered lunches…And much more!
As part of our dedication to the diversity of our workforce, Coupa is committed to Equal Employment Opportunity without regard for race, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity or religion.
Please be advised, inquiries or resumes from recruiters will not be accepted.