Senior Security Engineer - Customer Engineering

Harness
Bengaluru
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Technical analysis","Customer collaboration","Documentation","Signal-over-noise judgment","Threat assessment"]

Own detection validation for API and AI threats by operationalizing the Traceable by Harness Protection module with enterprise customers and acting as an extended SOC/red team. Pressure-test ModSecurity/WAF rules, API and AI security detections, and OWASP coverage, triage alerts, and validate true positives in production. Automate threat hunting with AI-assisted workflows, run global hunt engagements, perform black-box testing, and feed findings back into Security Research Engineering and Product.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Harness
Harness
1 day ago

Senior Security Engineer - Customer Engineering

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 16 hours agoStatus: Live

Job Summary

Own detection validation for API and AI threats by operationalizing the Traceable by Harness Protection module with enterprise customers and acting as an extended SOC/red team. Pressure-test ModSecurity/WAF rules, API and AI security detections, and OWASP coverage, triage alerts, and validate true positives in production. Automate threat hunting with AI-assisted workflows, run global hunt engagements, perform black-box testing, and feed findings back into Security Research Engineering and Product.
Location: Bengaluru
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Operationalize the Traceable by Harness Protection module by rolling it out and tuning it through steady-state enforcement with customers.
  • •Act as an extended SOC and red team to continuously monitor and hunt, probing defenses and improving security posture.
  • •Evaluate and pressure-test detections and rule coverage (ModSecurity rulesets, API security detections, AI security detections, OWASP Top 10/API Top 10/LLM Top 10) for accuracy and false-positive rates.
  • •Validate true positives in production traffic by partnering with customer security teams to triage alerts and document verdict reasoning.
  • •Automate and run global threat-hunting engagements (including business logic abuse, account takeover, credential stuffing, scraping, carding, and fraud) and perform black-box testing to confirm detections fire, then feed findings into the detection feedback loop.

Key Requirements

  • •4–6 years in security engineering, detection engineering, threat hunting, penetration testing, incident response, or a closely related discipline.
  • •Deep, current understanding of the security landscape, including threat models and attacker techniques for APIs and AI systems.
  • •Ability to code and automate threat hunting tooling to scale investigations across customers.
  • •Ability to use AI (including LLMs) for threat hunting, triage, and hunt automation workflows.
  • •Black-box penetration testing capability to attack APIs/detections without prior knowledge and reason like an adversary.
Experience:EnterpriseSecurity engineeringDetection engineeringThreat huntingSOCPenetration testing
Skills:Technical analysisCustomer collaborationDocumentationSignal-over-noise judgmentThreat assessment
Certifications:Certified API Pentester (C-APIPen)APIsec University ASCPPortSwigger Burp Suite Certified Practitioner (BSCP)Certified AI Security Professional (CAISP)OSWEGWAPTOSCP
Languages:English
Tech Stack:ModSecurityWAFOWASP Top 10OWASP API Security Top 10OWASP LLM Top 10MITRE ATT&CKMITRE ATLASRESTGraphQLGRPCOAuth 2.0OIDCJWTBurp SuitePostmanOWASP ZAPPythonLLMsCDNAkamai

Company Brief

Harness
Provides a continuous delivery and software delivery platform that automates deployment, feature releases, rollbacks, and cloud cost optimization using machine learning to help engineering teams deliver changes quickly and safely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series D
Headquarters: San Francisco, United States
Founded: 2016
WebsiteLinkedIn