---
title: 'Lead Product Security Engineer – Cloud Security at Tekion'
canonical: 'https://feeny.ai/job/lead-product-security-engineer-cloud-security-tekion-bengaluru-hbkywm3ejvxx'
type: 'job'
last_seen: '2026-09-06'
---

# Lead Product Security Engineer – Cloud Security at Tekion

- **Company:** Tekion
- **Location:** Bengaluru, India
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-08-28
- **Last confirmed live:** 2026-09-06
- **Apply:** https://jobs.ashbyhq.com/tekion/33f82d8a-d2e6-4b1f-98c1-571e649f6fb3

## Job description

## ABOUT TEKION:

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

Summary

We are seeking a Lead Product Security Engineer – Cloud Security to lead the operational and engineering execution of Tekion’s cloud security program across cloud-native products, infrastructure, platforms, and data services. This role combines hands-on technical depth with program ownership, stakeholder leadership, and people-management exposure. You will partner with CloudOps, Platform Engineering, Product Engineering, Data, IT, and Security Operations to improve cloud preparedness for new products, operate CSPM and DSPM capabilities, drive vulnerability closure within strict SLAs, and coordinate cloud-security support throughout incident detection, response, recovery, and continuous improvement.

Duties & Responsibilities Cloud Security Operations Management

- Lead day-to-day cloud security across AWS and Azure, including intake, triage, prioritization, assignment, escalation, validation, exception handling, and closure.
- Define operating rhythms, runbooks, ownership models, dashboards, and executive metrics for cloud risks, incidents, control health, and remediation progress.
- Manage operational backlogs and balance planned improvements, urgent exposures, product launches, audit needs, and incident-driven work.

Incident Management & SOC Partnership

- Act as the cloud security lead during cloud-related incidents, working with the SOC and incident response teams on scoping, containment, eradication, recovery, and stakeholder communication.
- Provide cloud context, identity analysis (preferrably), configuration evidence, and technical guidance to accelerate investigation and decision-making.
- Maintain cloud incident playbooks, escalation paths, forensic readiness, and post-incident action tracking; ensure lessons learned become durable control and detection improvements.

Vulnerability Closure & SLA Governance

- Facilitate end-to-end closure of cloud vulnerabilities, misconfigurations, identity risks, data exposures, and control gaps with infrastructure and product owners.
- Enforce stricter risk-based remediation SLAs, monitor aging and overdue findings, conduct regular reviews, and escalate material non-compliance through defined governance channels.
- Validate remediation evidence, govern exceptions and compensating controls, identify repeat root causes, and sponsor systemic fixes that reduce recurrence.

New Product Cloud Preparedness & Infrastructure Alignment

- Engage early with new product and platform initiatives to assess cloud preparedness, shared-responsibility boundaries, infrastructure dependencies, data flows, identity models, logging, resilience, and security support requirements.
- Lead cloud security design reviews and launch-readiness assessments; define minimum launch criteria, required guardrails, residual risks, and accountable owners.
- Partner with CloudOps and Infrastructure teams to deliver secure landing zones, IAM patterns, network controls, encryption, secrets management, monitoring, backup, and operational support readiness.

CSPM & DSPM Operations

- Own hands-on operation and optimization of CSPM/CNAPP/DSPM capabilities, including account onboarding, policy tuning, integrations, risk correlation, workflow automation, and posture reporting.
- Improve signal quality through suppression governance, ownership enrichment, risk-based prioritization, baselining, and measurable reduction of false positives and stale findings.

People Leadership & Stakeholder Management

- Provide technical direction, work allocation, coaching, feedback, and development support to cloud security engineers; contribute to hiring and capability planning.
- Build accountability and a high-ownership culture while maintaining psychological safety, clear expectations, and constructive cross-functional relationships.
- Communicate cloud risk, operational health, incident impact, SLA performance, and investment needs clearly to engineering and security leadership.

## Qualifications

Required

- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related field; equivalent experience considered.
- 10–15 years of experience in cloud security, product security, infrastructure security, security operations, or related engineering roles, including technical leadership responsibilities.
- Deep hands-on experience with AWS and/or Azure security, including IAM, networking, containers/Kubernetes, encryption, secrets, logging, monitoring, and infrastructure-as-code.
- Demonstrated operational experience with CSPM/CNAPP and practical exposure to DSPM operations, data discovery, classification, access analysis, and exposure remediation.
- Experience leading cloud incident response support with SOC teams and coordinating incident actions across engineering, infrastructure, and business stakeholders.
- Strong vulnerability-management, SLA-governance, exception-management, escalation, and remediation-closure experience.
- Experience assessing cloud readiness for new products and translating security requirements into actionable infrastructure and engineering plans.
- People-management exposure or demonstrated experience mentoring engineers, coordinating team delivery, and influencing without authority.
- Strong scripting or automation capability using Python, Bash, Terraform, policy-as-code, or equivalent technologies.

## Preferred

- Experience in high-scale SaaS, multi-cloud, or cloud-native product environments.
- Familiarity with NIST CSF, NIST incident response guidance, CIS benchmarks, ISO 27001, and SOC 2.
- Exposure to CIEM, CWPP, cloud detection engineering, SIEM/SOAR integrations, and data-loss prevention controls.
- Industry-recognized cloud security or security leadership certifications are a plus.

Current Tekion Employees: Please apply via the Internal Job Board in Ashby

Note: Tekion recently transitioned to a new recruiting tool and we appreciate your patience and feedback as we adjust to our new system!

Tekion is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, victim of violence or having a family member who is a victim of violence, the intersectionality of two or more protected categories, or other applicable legally protected characteristics.

For more information on our privacy practices, please refer to our Applicant Privacy Notice here https://tekion.com/legal/privacy/applicant-and-candidate-privacy-notice.

## About Tekion

## Company Overview
- **One-liner**: Tekion provides an end-to-end, AI-native platform that unifies dealerships, OEMs, and partners for modern automotive retail.
- **Entity Type**: Private (growth stage; $200M growth equity raise in 2024 at a $4B+ valuation)
- **Headquarters**: Pleasanton, California, USA
- **Founded**: 2016
- **Founders**: Jay Vijayan (CEO) and Guru Sankararaman (COO)

## Core Business
- **Primary industries**: Automotive retail technology, cloud-based dealership management, vertical AI.
- **Target customers**: B2B – automotive dealerships (retail groups and independents) and original equipment manufacturers (OEMs).
- **Mission**: To create a connected, convenient, and consistent consumer experience by unifying dealers, OEMs, and partners on a single AI-native platform.

## Products & Services
- **[Automotive Retail Cloud (ARC)](https://www.tekion.com/)**: AI-native operating system for dealerships covering sales, service, parts, accounting, and analytics. SaaS.
- **[Automotive Partner Cloud (APC)](https://www.tekion.com/)**: Next-gen platform for OEMs and partners to integrate and collaborate with the dealer ecosystem. SaaS.
- **[Tekion AI Agents](https://www.tekion.com/)**: Role-aware AI tools including Service Scheduler AI (automates booking), Technician AI (surfaces repairs), and Service Advisor AI (turns notes into customer-facing recommendations). Embedded in the platform.

## Market Standing
- **Valuation**: $4B+ (as of the 2024 growth equity round) [[tekion.com/about-us](https://www.tekion.com/about-us)]
- **Key Metric**: 3,000+ dealerships powered by Tekion; 235M+ annual transactions processed.
- **Notable Investors/Partners**: The specific lead investor for the $200M round is not publicly named in available materials. Key partners include General Motors (OEM), Ken Garff Automotive Group, and a Fortune 500 dealer group (largest in the country). [[tekion.com/about-us](https://www.tekion.com/about-us)]
- **Growth Signals**: Secured $200M in growth equity in 2024; crossed 1,100 ARC dealers in 2024; launched Service AI in 2025; earned recognition from Goldman Sachs Builders & Innovators (2022–2025), Forbes Cloud 100 (2023), and Fast Company Best Workplace for Innovators (2025).

## Competitive Advantages
- **AI-native, unified platform**: Unlike legacy point solutions, Tekion is built on a single data foundation, enabling real-time context across sales, service, accounting, and analytics.
- **Vertical AI specialty**: Purpose-built for automotive with ISO 42001 certification (responsible AI) and trained on dealership/OEM data.
- **High adoption & trust**: Customer approval rate for AI recommendations is 95%, and dealers report additional revenue generated from AI in 2025.
- **OEM certifications**: Certified with all major OEMs.

## Strategic Focus
- Expanding agentic AI capabilities (Service AI launched 2025) to further automate dealership workflows.
- Deepening enterprise partnerships with large dealer groups and OEMs globally.
- Continuing to scale the platform to more dealers and markets worldwide.

## Why Work Here
- **Culture**: Recognized as a Great Place To Work® (2026–2027) and Fast Company Best Workplace for Innovators (2025). Values include "One Team," collaboration, and continuous learning. [[tekion.com/careers](https://tekion.com/careers)]
- **Work flexibility**: Primarily in-person culture at Pleasanton HQ, but some fully remote positions exist in US, Canada, and EMEA. India offices (Bangalore, Chennai) are onsite with flex days. Roles are marked as remote/hybrid/onsite in job listings.
- **Perks**: 100% employer-paid medical/dental/vision, unlimited PTO (varies by role), stock options, flexible time off, wellness programs, recognition culture.
- **Growth & learning**: Tek-Learn program with Udemy, Frontend Masters, skill workshops, AMAs, and fireside chats.
- **Engineering culture**: AI-native, startup environment focused on disrupting automotive retail; described as "Silicon Valley Startup Environment" with a global team.

## Sources
1. [tekion.com](https://www.tekion.com/) – Product overview, platform details, metrics
2. [tekion.com/about-us](https://www.tekion.com/about-us) – Company history, leadership, funding, awards, partnerships
3. [tekion.com/careers](https://tekion.com/careers) – Culture, benefits, work policy, values
4. [linkedin.com/company/tekion](https://www.linkedin.com/company/tekion) – Entity summary and recent updates
5. [tekion.com/job-openings](https://tekion.com/job-openings) – Current job listings (via careers page)

## Other roles at Tekion

- [CDP - Lead Data Engineer](https://feeny.ai/job/cdp-lead-data-engineer-tekion-bengaluru-aaccxkpsr7bg) — Bengaluru, India
- [Customer Value Manager](https://feeny.ai/job/customer-value-manager-tekion-remote-3s6c4k658d47)
- [CDP - Data Analyst](https://feeny.ai/job/cdp-data-analyst-tekion-r4gz5580kkz8)
- [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-tekion-bengaluru-36yxw9vhc986) — Bengaluru, India
- [Customer Value Manager](https://feeny.ai/job/customer-value-manager-tekion-remote-rcdyf3p4bv2x)
- [Executive Account Director](https://feeny.ai/job/executive-account-director-tekion-remote-nm687w6grdzv)
- [Senior Technical Program Manager for Ecosystem and Integrations](https://feeny.ai/job/senior-technical-program-manager-for-ecosystem-and-integrations-tekion-bengaluru-nd9s11x6cs84) — Bengaluru, India
- [Manager, Technical Program Manager](https://feeny.ai/job/manager-technical-program-manager-tekion-bengaluru-cfm5hwyvxxq1) — Bengaluru, India
- [Staff Cloud FinOps Analyst](https://feeny.ai/job/staff-cloud-finops-analyst-tekion-bengaluru-mn8c41pcy3wk) — Bengaluru, India
- [Senior Software Engineer (Front End)](https://feeny.ai/job/senior-software-engineer-front-end-tekion-bengaluru-p997m8ksab3s) — Bengaluru, India