Principal Security Engineer

Salary: $180,000 - 190,000 per year Requirements:

• We look for 8+ years of security engineering experience, with clear progression into technical leadership.
• We require hands-on SIEM expertise, such as DataDog, ELK, or a comparable platform.
• We need deep knowledge of AWS security and IAM.
• We expect strong application security fundamentals, including threat modeling, SAST/DAST, and secure SDLC practices.
• We value experience building with AI/LLM APIs and practical awareness of LLM security risks.
• We require experience with EDR, DLP, and vulnerability management.
• We look for experience securing containerized workloads and Kubernetes.
• We expect proven mentoring ability and a track record of elevating team capability.
• We require a bachelors degree in a related field or equivalent experience.
• Preferred qualifications include CISSP, GIAC, or OSCP certification.
• Preferred qualifications include applied MITRE ATT&CK knowledge for detection engineering.
• Preferred qualifications include security-as-code experience, such as OPA, Checkov, or tfsec.
• Preferred qualifications include data science or anomaly detection skills applied to security telemetry.
• Preferred qualifications include healthcare industry experience, including HIPAA or HITRUST.
• Preferred qualifications include familiarity with Kubernetes/EKS, Terraform/Terragrunt, Atlantis, Cloudflare, Buildkite, Wiz, Semgrep, EscapeTech, GitHub Advanced Security, Datadog, HashiCorp Vault, N8N, Snowflake, or Linear.

• We own the security engineering function end to end, from platform strategy through hands-on delivery.
• We set and uphold the standards for how security is designed and operated across our infrastructure, applications, and AI systems.
• We design, build, and maintain the tooling that supports Security Operations.
• We lead detection and response engineering, including onboarding and normalizing log sources from cloud, containers, endpoints, and SaaS.
• We develop and operate SOAR tooling to shorten response times and reduce analyst toil.
• We drive incident response for complex threats, including runbooks, post-incident improvements, and BCP/DR tabletop exercises.
• We embed security into the SDLC through threat modeling, secure design reviews, SAST/DAST, and automated CI/CD security gates.
• We own vulnerability management across host and application layers and push remediation forward.
• We promote security-as-code practices across engineering teams.
• We build AI-powered security capabilities, including threat detection, anomaly identification, automated triage, remediation workflows, and AI-assisted post-mortem summaries.
• We define and implement the security model for LLM-based systems and internal AI tools.
• We design guardrails to constrain LLM behavior and protect against prompt injection, indirect injection through RAG, and data exfiltration.
• We evaluate and govern AI tool adoption from security and data-risk viewpoints.
• We own AWS security posture and enforce baselines across Linux, Windows, network devices, and enterprise SaaS environments.
• We engineer, configure, and run EDR, DLP, and endpoint security programs.
• We provide IAM architecture guidance across identity and access systems.
• We mentor junior and mid-level security engineers through design reviews, pairing, and direct feedback.
• We define and advance security engineering standards across the organization.
• We partner with IT operations, platform, and software teams to turn threat intelligence into detection and hardening priorities.

• AI
• AWS
• CI/CD
• Cloud
• Datadog
• ELK
• GitHub
• IAM
• Support
• Kubernetes
• LLM
• Linux
• n8n
• Network
• RAG
• Security
• Snowflake
• Terraform
• Windows
• Architect
• Azure
• Office 365

More:

We are Curative, building the future of health insurance with an employer-based plan that removes financial barriers and makes care more accessible through a single monthly premium with $0 copays and $0 deductibles. Backed by $150M in Series B funding and a $1.275B valuation, we are scaling quickly and investing in AI-powered service, deeper member engagement, and a smarter network for todays workforce. We are looking for a Principal Security Engineer to lead our security engineering function across infrastructure, applications, and AI systems, while helping grow the team around us. This is a remote role, and we value a collaborative culture grounded in trust, mutual respect, and support for people from a wide range of backgrounds, roles, and needs. Our benefits include our Curative Health Plan, comprehensive dental and vision coverage, life and disability insurance, flexible spending accounts, generous PTO plus 11 company holidays, a 401(k) for full-time employees, and up to 8–12 weeks of paid parental leave depending on eligibility.

last updated 33 week of 2026