Senior Product Security Engineer

As Product Security Engineer - Senior, you will:

• Implement and continuously improve Sprinklr's cloud security controls across AWS, Azure, and GCP environments.
• Perform security assessments of cloud infrastructure, IAM configurations, network architectures, Kubernetes environments, and cloud services to identify risks and recommend practical remediation.
• Develop, automate, and operationalize security baselines, guardrails, and security standards for cloud-native services, infrastructure, platforms, and product deployments.
• Assess Infrastructure as Code and Embed security controls enabling secure design, development, deployment, and operations of Cloud Infrastructure.
• Extend support for triaging Network PenTest findings and revalidating the fixes
• Support initiatives focused on cloud hardening, vulnerability management, identity security, attack surface reduction, infrastructure security, cloud governance, and DDoS resilience.
• Communicate technical risks, security findings, and remediation recommendations effectively to both technical and non-technical stakeholders.
• Partner closely with Engineering teams to remediate security findings, improve secure engineering practices, and integrate security into day-to-day development workflows.

Additionally, you will:

• Develop security tooling, AI automation frameworks and integrations that improve visibility, reduce manual effort, and scale security across engineering teams.
• Evaluate emerging cloud services, security technologies, and AI-driven capabilities, prototype solutions, and recommend improvements to strengthen Sprinklr's security posture.
• Support the execution of Sprinklr's cloud security and product security roadmap by partnering with Engineering, DevOps, Platform, and Product teams.
• Contribute to defining and tracking security metrics, operational dashboards, and engineering KPIs to measure security coverage, automation adoption, remediation effectiveness, and overall program maturity.
• Support in security incident response, root cause analysis, and post-incident improvements to strengthen cloud and product security.

• Knowledge about storage, compute, DNS and network services in AWS, Azure and/or GCP
• Knowledge about securing cloud services - (VPC/VNET, S3 or similar, Cloud Network Security, IAM, Logging and Auditing in Cloud, DNS, SMTP and Datastores)
• Knowledge about cloud agnostic & cloud specific security services offerings
• Knowledge about CIS benchmarks and security controls for Cloud service providers, Operating systems, Kubernetes, Docker and Server software technologies
• Knowledge about Disaster Recovery, High Availability and Encryption in Cloud
• Infrastructure as Code: Terraform, AWS Cloud Formation
• Basic knowledge of Kubernetes administration and security
• Docker concepts
• Operating Systems: Linux
• Any of these Scripting Languages: Python / shell / SQL / JavaScript
• Excellent communication skills
• Experience in understanding vulnerabilities, triaging them and providing remediation guidance to development

• Experience with CNAPP, CSPM, CWPP, CIEM, DSPM, KSPM, IaC Scanning and Vulnerability Management solutions
• Application Security: OWASP, Secure coding practices, vulnerability scanning, penetration testing
• Collaboration and Communication: Agile, Scrum, Jira, Confluence
• Experience working with Version Control Tools: Gitlab / Github
• Experience working with any of these Continuous Integration Tools: Jenkins / Airflow
• Experience working with any of these Continuous Deployment Tools: Chef / Ansible / Helm
• Experience building AI Assisted or Agentic workflows
• Data Lakes: Snowflake or BigQuery
• API Tools: Postman

: Sprinklr was founded in 2009 to solve a big problem: growing enterprise complexity that separated brands from their customers. Our vision was clear: to unify fragmented teams, tools and data - helping large organizations build deeper, more meaningful connections with the people they serve. Today, Sprinklr has a unified, AI-native platform for four product suites: Sprinklr Service, Sprinklr Social, Sprinklr Marketing, and Sprinklr Insights. Sprinklr is here to do three things:

• Lead a new category of enterprise software that we call Unified-CXM.

• Empower companies to deliver next generation, unified engagement journeys that reimagine the customer experience.

• Create a culture of customer obsession, with trust, teamwork, and accountability.