Principal Software Engineer / Manager, Security
Rafay Systems (company site, opens in a new tab)HybridDirect career pageEst. 30–55 LPA
Posted 30d ago
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Reach people at Rafay Systems
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Rafay Systems you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Lead security design and architecture for SaaS and on-premises GPU cloud platform, embedding security from early product design through implementation.
- Own and operate company-wide security programs including secure SDLC, vulnerability management, penetration testing, compliance (SOC 2, ISO 27001, FedRAMP), and cryptographic key lifecycle management.
- Partner across engineering, product, and go-to-market teams to maintain security posture, regulatory compliance, and produce customer-facing security documentation.
Minimum Requirements
- Experience: Significant experience in software or product security with SaaS and on-premises distributed software platforms.
- Technical skills: Deep hands-on knowledge in trusted/confidential computing, cryptography/secret management, network and infrastructure security, and cloud-native security (Kubernetes/containers preferred).
- Compliance expertise: Proven ability to implement and maintain compliance programs like SOC 2 Type 2, ISO 27001, FIPS, or FedRAMP/NIST 800.
- Work Experience Required: Not explicitly mentioned in the JD.
Ideal Candidate Profile
- Technical leadership style: Experience operating as a technical leader capable of balancing security rigor with product velocity, either as a principal individual contributor or engineering manager.
- Domain expertise: Strong background in securing SaaS platforms with knowledge of secure SDLC processes and software supply-chain security.
- Programmatic impact: Demonstrated success running measurable security programs including vulnerability management and penetration testing, with effective communication skills for engineering and customer audiences.