Product Security Engineer Cloud Sec

At Infoblox, every breakthrough begins with a bold “what if.” 

What if your ideas could ignite global innovation? 

What if your curiosity could redefine the future? 

We invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career. 

How we empower our people is extraordinary: we’re recognized as a Glassdoor Best Place to Work 2025, Great Place to Work-Certified in five countries, and honored by Cigna as a Healthy Workforce honors for three consecutive years; and what we build is world class: named CybersecAsia’s Best in Critical Infrastructure 2024 — clear evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next.” 

In a world where you can be anything, Be Infoblox. 

Product Security Engineer II 

We have an opportunity for a Product Security Engineer II to join our Product Security Engineering team in Bangalore, reporting to the Senior Manager, Product Security Engineering. In this role, you will help strengthen the security of Infoblox products, cloud services, and supporting infrastructure across the software development lifecycle. You will assess security risks, guide engineering teams toward practical mitigations, and help automate security testing and vulnerability management at scale. Collaborating closely with product engineering, cloud, DevOps, architecture, and security teams, you will contribute to secure design, threat modeling, application security testing, and continuous improvement of our security practices. 

Be a Contributor — What You’ll Do 

• Design, implement and harden security controls across AWS, Azure or GCP, Kubernetes, identity systems and product infrastructure
• Deploy, manage and tune security tools such as cloud-native application protection platforms (CNAPP), cloud security posture management (CSPM), endpoint detection and response (EDR) and security information and event management (SIEM) platforms
• Investigate, scope and contain security incidents as a second- and third-line escalation partner, and drive remediation with the SOC and engineering teams
• Perform root cause analysis after incidents and turn findings into lasting control and detection improvements
• Validate the exploitability of vulnerabilities and security findings, write diagnostic scripts and recommend risk-based remediation
• Contribute to threat modeling and security reviews of cloud architecture and product deployments, and advise on solution design
• Build security automation and guardrails as code with Terraform, CI/CD pipelines and scripting
• Build and maintain AI agents and AI-assisted workflows for alert enrichment, incident investigation, log analysis and vulnerability triage. Validate outputs for accuracy and security
• Automate incident response steps, including evidence collection, containment actions and stakeholder notifications, to shorten response times
• Use AI and large language model (LLM) tools to accelerate engineering, investigation and documentation, and assess AI systems and agentic integrations for identity, access and data exposure risks
• Mentor junior engineers, document runbooks and playbooks, participate in PI planning and improve team processes, tools and methodologies
• Coordinate with North American teams and maintain a few hours of daily work overlap

Be Prepared — What You Bring 

• Five or more years of related experience with a bachelor’s degree, or three or more years with a master’s degree, or equivalent work experience, including hands-on incident response
• Hands-on experience securing at least one major cloud platform (AWS, Azure or GCP); multi-cloud experience is a plus
• Experience with security tools such as Wiz, CrowdStrike, SIEM platforms and vulnerability scanners; Kubernetes and container security experience is strongly preferred
• A solid understanding of security fundamentals, including firewalls, VPNs, authentication, certificates and intrusion detection, plus networking, cloud architecture and common attack paths
• Strong scripting and automation skills in Python, Go, Bash or similar, including diagnostic scripts and integrations with security-tool APIs
• Experience using AI and LLM tools in security engineering, with sound judgment to validate their output
• Experience building AI-assisted workflows or agents using prompt engineering, MCP or agent frameworks is strongly preferred; understanding of risks such as prompt injection and over-permissioned agents is important
• The ability to break complex problems into manageable parts, work methodically, pay close attention to detail and communicate technical issues clearly across teams
• Experience with SOAR platforms or automated response playbooks, offensive security, or certifications such as OSCP, GCIH, GCIA, CISSP or a cloud security specialty is a plus
• A BS/B.Tech, MS/M.Tech or PhD in computer science, computer engineering, electrical, electronics or communication engineering, or a related field, or equivalent work experience

Be Successful — Your Path 

First 90 Days: Immerse in our culture, connect with mentors (Blox Buddies), and map the systems and meet with key stakeholders that rely on your work. Discuss and create short- and long-term goals. 

Six Months: 

• Understand Infoblox products, cloud infrastructure and SaaS services, and how the security tooling fits together.
• Deploy and manage at least one security tool or infrastructure security domain.
• Participate in the incident response rotation and understand the SOC escalation process.
• Build relationships with stakeholders across engineering, platform, IT and the SOC.
• Deliver at least one AI-assisted or automated workflow that reduces risk or manual effort

One Year: 

• Perform incident investigations from triage through root cause analysis with minimal guidance.
• Own assigned security tools and domains, and improve controls and detections based on incident learnings.
• Build and ship AI agents or automation that reduce incident response time or manual engineering effort.
• Mentor junior engineers and contribute to improvements in team processes, tools and methodologies.