Principal Engineer, Security

📋 Description

• Define infra security architecture: IAM, secrets, network controls.
• Build IaC guardrails; codify controls into golden paths.
• Own vulnerability management: triage, remediation, trend tracking.
• Define security SLOs and compliance framework; run readiness reviews.
• Author ADRs/RFCs; embed controls in CI/CD and observability.
• Lead threat modeling and security design reviews for high-risk changes.

🎯 Requirements

• 10+ years in infrastructure or platform security engineering.
• Deep cloud security: AWS/GCP IAM, mTLS, secrets, network defenses.
• Define security SLOs; track MTTR; communicate risk.
• Developer-centric mindset; build tools/guardrails engineers adopt.
• Cross-org influence via threat models, security reviews, IaC guardrails.
• On-call for security incidents; write runbooks and readiness reviews.
• AI tools and automation in security; guardrails and audit trails.
• Nice to have: zero-trust, SOC 2/ISO 27001 familiarity; CI/CD tooling.

🎁 Benefits

• Generous benefits including health, welfare, and wellbeing.
• Opportunity to work with AI tooling to advance security engineering.
• Collaborative, inclusive culture that values your whole self.
• Mentor engineers and grow your security expertise.