Principal Security Engineer

Job Description

BluOcean Cyber is seeking a forward-deployed delivery leader and hands-on AI and SaaS Security Architect to lead complex AI Workflow and SaaS Security engagements for technology-driven and investment-management clients.

This is not a traditional project-management role. The person must be able to set the engagement structure, manage client expectations, lead architects and engineers, and personally take ownership of technical work when needed.

The right candidate combines delivery discipline, client judgment, technical credibility and an ownership mindset. You should be equally comfortable leading an executive steering meeting, resolving a delivery risk, reviewing an architecture, and securing AI workflows and SaaS ecosystem alongside the engineering team.

About the Role

You will own AI and SaaS security engagements valued at up to $500,000—from solution design and mobilization through hands-on implementation, remediation and transition into managed operations. You will be accountable for scope, schedule, financial performance, team execution, client satisfaction and measurable security outcomes.

You will work directly with CISOs, CTOs, security architects, product and platform engineers, risk leaders and business stakeholders. Many of our clients have engineering-heavy cultures and high expectations for pace, clarity, technical depth and follow-through. You must understand how to operate credibly in that environment.

This role also helps shape solutions during pre-sales, expands trusted client relationships, and hires and leads delivery teams across the United States and India.

What You Will Own

Engagement Delivery and Client Leadership

• Lead engagements of up to $500,000, establishing the delivery model, governance, workplan, milestones, decision rights, dependencies and success measures.
• Own client expectations from the beginning: clarify what will be delivered, by whom, by when, and what decisions or actions are required from the client.
• Manage scope, schedule, budget, margin, staffing, risks, issues, change control, quality and executive reporting.
• Own an auditable quality model across solution design, engineering, remediation and transition to operations—with clear quality gates, peer reviews, acceptance criteria and evidence of completion aligned with the client’s operating model.
• Create an operating rhythm that keeps engineering work moving: working sessions, status reviews, risk escalation, decisions, action tracking and evidence of completion.
• Identify delivery problems early, communicate them directly and drive resolution without waiting for the client or leadership team to intervene.
• Build trusted relationships with client executives while remaining close to the architects and engineers doing the work.

Forward-Deployed AI Workflow and SaaS Security Engineering

• Assess AI workflows, MCP tools, AI chatbots, AI companions, SaaS platforms, identify security and configuration risks, design the target state, prioritize remediation, and personally lead or execute critical parts of the solution.
• Personally take ownership of a technical workstream or application when needed—not simply review slides or coordinate others.
• Translate Ai security and SSPM findings and platform telemetry into validated risks, practical engineering actions, accountable owners and measurable closure.
• Design AI workflow and SaaS security architecture, controls, governance, operating procedures, monitoring, exception handling and incident-response playbooks.
• Lead and facilitate technical discussions with AI and SaaS application owners to plan and execute remediation workflows.
• Work across platforms such as Salesforce, Microsoft 365, Workday, ServiceNow, Google Workspace, GitHub, Slack, Snowflake, Box and similar enterprise SaaS applications.
• Assess APIs, OAuth integrations, AI copilots, agents and MCP-connected workflows; design security controls and monitoring criteria for how data, identity and actions flow across SaaS applications.
• Use and help evolve BluOcean’s SNAPP platform, integrating SSPM and specialized AI and MCP security technologies to accelerate discovery, business-risk prioritization, remediation and continuous monitoring.

Solution Design and Account Growth

• Lead or support discovery, opportunity qualification, estimation, proposals, statements of work, staffing models and solution presentations.
• Shape solutions that are technically sound, commercially viable and realistic for the client's culture, maturity and engineering capacity.
• Recognize additional client needs, earn the right to expand the relationship, and convert strong delivery into follow-on work.
• Protect delivery economics by managing scope, utilization, staffing mix, margin and changes transparently.

Team Leadership

• Hire, lead and develop security engineers, senior security engineers and security architects across the United States and India.
• Set clear technical and delivery expectations, review work quality, coach team members and hold people accountable for outcomes.
• Create reusable playbooks, templates, runbooks and delivery methods that improve consistency without turning the work into bureaucracy.

Required Experience

• 8+ years in cybersecurity, including meaningful experience in security architecture, cloud security, application security, product security or SaaS security.
• Demonstrated ownership of client-facing security consulting and security engineering engagements, including engagements or programs approaching $500,000 in value.
• Strong hands-on technical background. You must be capable of independently owning and delivering a defined SaaS security or architecture workstream.
• Strong experience working with wealth-management, investment-management, private-equity, hedge-fund, family-office, fund-administration or fintech clients.
• Understanding of the culture of investment firms: high trust, discretion, business urgency, lean technology teams, regulatory scrutiny and relationship-driven decision-making.
• Experience working directly with engineering-heavy client teams and earning credibility with architects, platform owners and senior engineers.
• Experience managing engagement scope, schedules, budgets, margin, staffing, risks, change control and client expectations.
• Experience leading distributed US and India teams, including hiring, work allocation, quality review, coaching and accountability.
• Ability to communicate technical risk in clear business terms without oversimplifying the engineering reality.

Preferred Experience

• Direct experience with AI workflow security, MCP security, SaaS Security Posture Management (SSPM), SaaS governance, identity, integrations or continuous monitoring.
• Deep architecture or administration experience in one or more major Cloud and SaaS platforms; Salesforce architecture or advanced Salesforce certifications are particularly valuable.
• Experience with AppOmni, Obsidian Security, Reco, Adaptive Shield, Falcon Shield or similar technologies, plus exposure to AI security platforms, copilots, agents, LLM integrations or MCP ecosystems.
• Familiarity with MITRE ATT&CK and MITRE ATLAS, NIST AI RMF or comparable frameworks for structuring SaaS and AI threat models, governance and control requirements.
• Practical involvement in cloud, SaaS or AI security incidents, including triage, containment, evidence preservation, remediation and post-incident improvement.
• Pre-sales solutioning, proposal development, estimation, account expansion and consulting practice development.
• CISSP, CCSP, CCSK, Salesforce, AWS, Azure or other relevant architecture and security certifications.

How Success Will Be Measured

• Consistent delivery quality, with defects and deviations identified early, corrective actions driven to closure and evidence available for client review or audit.
• Engagements delivered on schedule, within scope, budget and margin expectations, with strong client satisfaction.
• Security risks validated, prioritized and remediated—not merely identified and reported.
• Clear client expectations, timely decisions, controlled changes and early resolution of delivery risks.
• Technical credibility and productive engagement with client architects, engineers and platform owners.
• Repeatable delivery methods, stronger US/India teams, expanded client relationships and follow-on revenue.

Our Ambition

SaaS is where the modern enterprise runs. Increasingly, it is where AI runs—and existing security models were not built for either.

BluOcean intends to define and own the AI Workflow and SaaS Security market. We are building SNAPP—the security platform for the AI-powered SaaS enterprise—combining proprietary technology, an integrated ecosystem of AI and MCP security capabilities, forward-deployed engineering and deep business context.

We are starting with investment management and other sophisticated, SaaS-dependent industries where trust and operational resilience are inseparable. Our ambition is to build the category-defining company—and the exceptional team that makes it possible.