Principal Engineer — Product & Application Security

📋 Description

• Own multi-year security vision for product & app security across Freshworks.
• Define secure-by-design reference architectures and standards.
• Lead threat modeling and security design reviews for critical systems.
• Harden multi-tenant security controls: isolation, authN/authZ, data protection.
• Define left-shift & secure SDLC across CI/CD (SAST/DAST/SCA, IaC).
• Establish vulnerability management and incident response framework.

🎯 Requirements

• 12+ years in software engineering or security with SaaS ownership.
• Principal-level IC whose technical vision shaped an entire engineering org.
• Deep experience securing multi-tenant cloud-native SaaS (AWS) incl authN/authZ.
• Proven impact removing vulnerability classes and setting org-wide frameworks.
• Authoritative knowledge of OWASP Top 10, API Security Top 10, ASVS.
• Deep CI/CD security experience: SAST/DAST/SCA, secret scanning, IaC.

🎁 Benefits

• Hybrid role with on-site expectations 3x/week in San Mateo, CA.
• Health, dental, vision, disability, and life insurance.
• Equity + ESPP; flexible PTO; commuter benefits.
• Career growth and a strong security-first culture.