Senior Trust Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Trust Engineer based in India.
We are seeking an experienced Senior Trust Engineer to lead security engineering and compliance initiatives for a cloud-based SaaS platform. In this strategic and hands-on role, you will take ownership of the security roadmap, strengthen platform protection, and ensure that security controls meet industry standards and enterprise requirements. You will work closely with engineering, infrastructure, and business teams to identify vulnerabilities, mitigate risks, and embed security practices throughout the software development lifecycle. A key focus will be maintaining SOC 2 compliance, improving incident response capabilities, and ensuring audit readiness. You will also evaluate and implement security technologies while balancing technical priorities, operational requirements, and business objectives. This is an excellent opportunity to influence security strategy, drive meaningful improvements, and contribute to a collaborative, globally distributed engineering environment.

Accountabilities:

Security Strategy and Roadmap:

Lead security and compliance initiatives across research and development, proactively identifying risks, evaluating existing controls, and recommending improvements.
Develop, maintain, and execute the platform security roadmap, prioritizing initiatives based on risk exposure, business objectives, and enterprise security requirements.
Establish security priorities and make informed technical decisions within organizational policies and governance frameworks.
Assess security risks, communicate potential impacts, recommend mitigation strategies, and escalate significant concerns with clear, actionable proposals.
Drive continuous improvements in security architecture, policies, and engineering practices.

Security Compliance and Audit Management:

Lead security compliance activities and maintain alignment with relevant industry standards and enterprise requirements.
Own SOC 2 audit readiness, coordinating control implementation, evidence collection, auditor interactions, and remediation of identified findings.
Ensure security controls are consistently implemented, documented, monitored, and maintained across the platform.
Collaborate with internal stakeholders to address compliance gaps and strengthen governance processes.
Monitor evolving security and compliance requirements and translate them into practical engineering initiatives.

Security Incident Response and Risk Management:

Own and continuously improve security incident response policies, ensuring alignment with enterprise procedures, escalation requirements, and response expectations.
Establish and maintain effective incident management processes to support timely identification, escalation, investigation, and resolution of security incidents.
Review incident response procedures regularly to ensure they remain relevant, effective, and operationally actionable.
Provide guidance to engineering and business teams on security risks, incident handling, and remediation priorities.

Security Engineering and Tooling:

Evaluate, recommend, select, and implement security tools that strengthen application security, vulnerability management, dependency monitoring, and cloud security.
Partner with engineering teams to ensure software dependencies remain current and security vulnerabilities are addressed promptly.
Integrate security scanning, vulnerability assessments, and software license checks into development workflows and CI/CD pipelines.
Promote secure software development practices and ensure security considerations are incorporated throughout the engineering lifecycle.
Monitor the effectiveness of implemented security technologies and identify opportunities for further optimization.

Cross-functional Leadership and Collaboration:

Work closely with engineering, infrastructure, business, and enterprise security teams to establish accountability and drive security initiatives through completion.
Influence technical decisions and promote a proactive security culture across development teams.
Communicate complex security concepts, risks, recommendations, and technical trade-offs clearly to both technical and non-technical stakeholders.
Balance security requirements with engineering effort, operational constraints, and business priorities.
Take ownership of strategic security projects while operating effectively in an environment that requires independent judgment and initiative.

Requirements:

At least 7 years of professional experience in security engineering, application security, cloud security, or comparable technical security roles.
Demonstrated experience supporting and securing SaaS products, with a strong understanding of cloud-based application environments.
At least 3 years of experience owning a security strategy or security program, including independently identifying security gaps, developing recommendations, making technical decisions, and delivering measurable improvements.
Proven ability to balance security risks, engineering resources, and business priorities while making sound decisions in complex or ambiguous situations.
Hands-on experience leading at least two SOC 2 audit cycles, including security control implementation, audit preparation, evidence collection, auditor engagement, and remediation of findings.
Experience developing, implementing, and maintaining security incident response policies aligned with enterprise security standards and escalation procedures.
Practical experience evaluating, selecting, implementing, and managing security tools covering:

Vulnerability management and security assessment.
Application security and secure development practices.
Software dependency and license scanning.
Cloud security monitoring and protection.

Strong understanding of security controls, risk management, compliance frameworks, and secure software development lifecycle practices.
Experience integrating security checks and automated scanning into CI/CD pipelines and engineering workflows.
Proven ability to lead through influence, coordinate cross-functional initiatives, establish accountability, and ensure projects are delivered successfully.
Excellent written and verbal communication skills, with the ability to explain technical security risks, mitigation strategies, and business implications to engineering teams and senior stakeholders.
Strong analytical, organizational, and problem-solving skills, combined with a proactive approach to identifying and addressing security weaknesses.
Ability to work independently, exercise sound judgment, and take ownership of security initiatives from strategy through execution.
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related discipline, or equivalent practical professional experience.

Benefits:

Fully remote working arrangement based in India.
Full-time opportunity within an established international technology environment.
Opportunity to lead and influence security strategy across a cloud-based SaaS platform.
Exposure to enterprise-level security, compliance, and governance initiatives.
Opportunity to lead SOC 2 audit processes and strengthen organizational security maturity.
Collaboration with diverse, globally distributed engineering and business teams.
Opportunities to work with modern security technologies, vulnerability management solutions, and automated security tooling.
Professional development through challenging technical projects and continuous learning opportunities.
Opportunity to contribute to products and services that support quality, safety, compliance, and the protection of essential resources.
Career growth opportunities within a global organization that values innovation, diversity, collaboration, and professional development.
Inclusive and supportive working environment that encourages different perspectives and backgrounds.