Senior Security Engineer
Core
Architect and manage Navan's end-to-end vulnerability management program, lead security incident response, and optimize detection/automation pipelines in a cloud-native environment.
Role type
Senior hands-on IC security engineer (vulnerability management & incident response)
Builds
Enterprise vulnerability management program, incident response workflows, detection tuning, and identity governance controls
Domain
Cloud-native enterprise security, travel tech
Required skills
Vulnerability management, incident response, SIEM tuning, SOAR workflows, Zero Trust/IAM, email security, risk prioritization (CVSS/EPSS), cloud infrastructure
Preferred skills
Exposure management platforms, modern attacker TTPs, SLA negotiation, cross-functional security leadership
Technologies
Tenable, Qualys, Rapid7, Wiz, SIEM, EDR/XDR, Phantom, Demisto, XSOAR, Okta, Ping, Azure AD, Material Security
Responsibilities
Architect and scale vulnerability management programs; manage security incident response and on-call rotation; tune SIEM rules and optimize SOAR playbooks; enforce IAM principles and manage email security; partner with engineering to embed security best practices; establish and track security KPIs
Seniority
Senior, hands-on IC
