Senior Security Operations Engineer

Couchbase, Inc. · Bangalore, India

  • Senior
  • Full-time
  • Posted 2026-09-15
  • Confirmed live on 25 September 2026

Apply at Couchbase, Inc.

Job description

Couchbase, the operational data platform for AI, empowers businesses to succeed by bringing data to life in new ways. Major market-leading companies rely on Couchbase for mission critical operational, analytical, mobile and AI workloads. Built to replace legacy infrastructure and fragmented data services, Couchbase empowers enterprises with a unified platform architected for performance, flexibility and global scale.

With Couchbase, organizations bring their data to life, launching game‑changing customer experiences, exploring the limitless potential of AI, and seamlessly extending applications from the cloud to the edge and beyond. Couchbase’s AI‑ready technology and enterprise partnership model eliminate complexity and reduce total cost of ownership, enabling teams to stay agile, innovative and secure.

Couchbase believes data should never slow you down, but act as the foundation for your next breakthrough. Discover why Couchbase is trusted to help the world’s biggest players scale, move fast and stay resilient, no matter what’s next on their roadmap. Visit couchbase.com and follow us on LinkedIn and X.

Want to be part of our story? Apply today!

About Couchbase

Couchbase is the Operational Data Platform for AI. Our customers don't run AI in a lab — they run it in production, where agents remember, reason, and act on live operational data. With the Couchbase AI Data Plane, we give those agents one governed layer for memory, context, tool access, and MCP, deployed anywhere from public cloud to Kubernetes to the edge to air-gapped environments. Amadeus, Cisco, Comcast, FICO, PepsiCo, United, Verizon, and Wells Fargo trust us with their data.

That means AI security isn't a side topic here. It's adjacent to the product, and it's the environment we operate in every day.

The Role

We're hiring a Sr. Security Operations Engineer to join Couchbase's global Information Security team as our second dedicated SecOps engineer.

We think the interesting work in security operations right now sits at the intersection of two things. The first is that AI has changed what a capable adversary can do at scale, which changes what detection and response have to look like. The second is that AI is also the most useful thing to happen to defenders in years — and we'd rather be early than careful about that.

We use AI internally in security operations, not as a pilot: triage agents that risk-rank and route findings, automated threat modeling with human review at closure, reachability scoring that separates real exposure from scanner noise, and AI-assisted detection and response workflows. We want someone who will build on that, push it further, and stay clear-eyed about where it earns trust and where it doesn't.

Roughly half your time is operational — triage, investigation, containment, tuning. The other half is engineering and program work: building detection content, automating response, and running security capabilities across cloud, identity, endpoint, and AI governance. You'll work across Engineering, SRE, IT, Cloud, Legal, and Compliance, and you'll own outcomes rather than tickets.

Key Responsibilities

Detection & Response Operations

• Own alert triage, investigation, and containment alongside our existing SecOps engineer, supporting a follow-the-sun coverage model.

• Manage the SIEM day to day: log source onboarding, normalization, retention, correlation rule development, and validation of alert use cases.

• Maintain the operating model with our managed detection partners — escalation thresholds, containment ownership, and handoff procedures.

• Measure and report MTTD, MTTR, and MTTC against defined targets; run a regular alert-tuning cadence.

• Develop incident-specific response playbooks and support cross-functional tabletop exercises.

• Run hypothesis-driven threat hunting against available telemetry, with documented hypotheses, resulting detections, and tracked follow-up.

Automation & AI-Assisted Security Engineering

• Build and agent-based workflows for enrichment, triage, and automated containment.

• Operate and tune AI triage agents that ingest findings from cloud and vulnerability tooling, rank by severity and reachability, and route to named owners.

• Integrate security tooling via API so detection, findings, and evidence flow automatically.

• Automate repetitive operational work — evidence collection, inventory reconciliation, and reporting.

Vulnerability & Exposure Management

• Run the vulnerability management lifecycle across endpoints, servers, network devices, and cloud workloads: scan coverage, risk-based prioritization, owner assignment, SLA tracking, and verification.

• Prioritize on exploitability, reachability, and business context rather than raw CVSS.

• Maintain an authoritative asset register reconciled across cloud, endpoint, and vulnerability tooling, with automated discovery and per-asset ownership.

• Coordinate internal and external penetration testing across corporate, d

Prepare for the interview

Nothing collected for this employer yet. The Blind 75 is what technical screens draw from; practise it here, with a coach, in Java or Python.

More at Couchbase, Inc.

More like this

All open software jobs