Senior Security Engineer - Customer Engineering

About the role

Harness is the AI Software Delivery Platform company, led by founder Jyoti Bansal, helping teams ship software faster while maintaining security and governance throughout the software delivery lifecycle. The Senior Security Engineer in Customer Engineering sits at the intersection of the Security Research Engineering team and customers worldwide, validating detections, hunting threats in real customer traffic, and acting as an extended SOC and red team. Based in Bengaluru, Karnataka, India, this hands-on, detection-focused role operationalizes the Traceable by Harness Protection module and continuously improves customer security posture.

What you’ll do

• Operationalize the Protection module — work directly with customers' security teams to stand up and tune the Traceable by Harness Protection module from initial rollout through steady-state enforcemen
• Be the customer's extended SOC and red team — engage continuously to monitor and hunt, and probe defenses to steadily improve overall security posture
• Evaluate detections built by Security Research Engineering — review and pressure-test ModSecurity rulesets, API security detections, AI Security detections, and OWASP Top 10 / API Top 10 / LLM Top 10
• Validate true positives in production traffic — partner with customer security teams to triage platform alerts, confirm genuine true positives, distinguish them from false positives and benign anomali
• Automate the hunt — build scripts, tooling, and automated workflows, increasingly AI-assisted, that scale threat hunting across many customers at once
• Run threat hunting engagements globally — proactively hunt across API traffic for business logic abuse (BOLA/BFLA, parameter tampering, workflow abuse), account takeover, credential stuffing, scraping
• Black-box test the platform and customer APIs — attack detections and API endpoints the way a real adversary would to validate coverage, find blind spots, and generate adversarial traffic to confirm d
• Own the detection feedback loop — turn field findings into concrete, prioritized input for Security Research Engineering and Product, including new rule ideas, tuning recommendations, and coverage imp

What you’ll bring

• 4–6 years in security engineering, detection engineering, threat hunting, penetration testing, incident response, or a closely related discipline
• Deep, current understanding of the security landscape — threat models, attacker techniques, and how attacks against APIs and AI systems actually play out
• Ability to code and automate — write own tooling to scale threat hunting (not a point-and-click role)
• Ability to use AI for threat hunting — actively leverage LLMs and AI-assisted workflows to accelerate investigation, triage, and hunt automation
• Black-box penetration testing ability — attack an API or a detection with no prior knowledge and reason about what an adversary would do
• Comfort working directly with enterprise customers globally — lead technical conversations, defend a verdict, and write findings that stand up to scrutiny
• Hands-on with WAF / ModSecurity rule logic — reading, writing, tuning, and reasoning about false-positive / false-negative tradeoffs
• Python (or equivalent) to build investigation tooling and automated, increasingly AI-assisted hunt workflows; comfort querying large volumes of traffic and telemetry

Nice to have

• Familiarity with CDN, gateway, and upstream traffic architectures (Akamai, Cloudflare, and similar) and how they interact with detection at the edge
• Prior experience in a customer-facing security engineering, SOC, or professional services role
• API security certifications such as Certified API Pentester (C-APIPen), APIsec University ASCP, or PortSwigger Burp Suite Certified Practitioner (BSCP)
• Hands-on AI security certification such as CAISP (Certified AI Security Professional) or equivalent
• Offensive / web depth certifications such as OSWE, GWAPT, or OSCP

Skills