# Lead Security Reliability Engineer

**Company**: Thomson Reuters
**Location**: Bengaluru, Karnataka
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/Lead-Security-Engineer_JREQ202804?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_fb623a40-375

## Description

## About the Role

As Lead Security Reliability Engineer, you will act as the technical lead for security across application, cloud, and infrastructure. You will set technical direction, make key calls, own the shape and quality of the security backlog end to end, and serve as the point of escalation for complex security and remediation work.

### Key Responsibilities:

- Design and build security controls across layers such as operating systems, container orchestration, CI/CD pipelines, cloud configuration, and network boundaries to defend against sophisticated adversaries and insider threats.

- Design new security processes and ways of working, revamping patching cycles and golden-image and base-image refreshes across cloud and on-prem, so the team can move fast without sacrificing safety.

- Identify areas for improvement in security and remediation processes, propose better approaches, and turn them into standards the team adopts.

- Set the technical approach across the full security scope, prioritizing by risk in line with industry best practices such as CISA guidance.

- Raise the technical bar by reviewing fixes and mentoring engineers, and coordinate with the wider security team across regions.

- Own clear reporting and metrics, and build the runbooks, standards, and escalation paths that make security a repeatable, auditable capability.

## About You

- 8+ years of hands-on experience in security engineering, vulnerability management, or cloud and infrastructure security, including time as a technical lead or senior individual contributor.

- A deep understanding of security principles, common vulnerabilities, and best practices across application, cloud, and infrastructure layers.

- A working command of vulnerability management at scale, including prioritization frameworks, CVSS/EPSS, CISA KEV, and SLA-driven burndown.

- Breadth across the security stack, including application and dependency vulnerabilities, infrastructure patching, guardrails, WAF, network isolation, and identity and access controls.

- A track record of designing and improving technical processes, such as patching cycles, image or GAMI refreshes, or remediation workflows.

- Strong judgment on balancing risk reduction against operational and customer impact.

- Excellent written and verbal communication, comfortable operating across security, engineering, and business audiences.

## What's in it For You?

- Hybrid Work Model: flexible hybrid working environment

- Flexibility & Work-Life Balance: supportive workplace policies, including work from anywhere for up to 8 weeks per year

- Career Development and Growth: culture of continuous learning and skill development

- Industry Competitive Benefits: comprehensive benefit plans, including flexible vacation, Mental Health Days off, access to Headspace app, retirement savings, tuition reimbursement, and employee incentive programs

- Culture: globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more

- Social Impact: opportunities to make an impact in the community, including two paid volunteer days off annually

## About Us

Thomson Reuters is a global business with 26,000 employees across more than 70 countries.

## Skills

### Required
- security engineering
- vulnerability management
- cloud security
- infrastructure security
- CISA guidance
- CVSS/EPSS

### Nice to have
- AI-assisted security tooling
- automated security tooling

---

Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/Lead-Security-Engineer_JREQ202804?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)