Principal Security Engineer

Responsibilities

• Design reusable security architecture patterns, automated guardrails, and controls across product and corporate systems.
• Own complex security initiatives from design and testing through deployment, maintenance, and measurable control improvement.
• Engineer cloud, network, endpoint, identity, application, container, and data security across AWS, Kubernetes, Windows, macOS, Okta, JumpCloud, and SaaS systems.
• Build and maintain SIEM, SOAR, endpoint security, vulnerability management, telemetry, detection, and automated response capabilities.
• Support threat hunting and incident response through containment automation and post-incident hardening.
• Automate code, dependency, container, infrastructure, and compliance evidence scanning and remediation workflows.
• Implement data discovery, classification, access control, encryption, retention, secure deletion, and regulatory recordkeeping controls.
• Mentor engineers, conduct design and code reviews, document architectures and runbooks, and influence cross-functional technical decisions.

Requirements

• 10+ years of relevant security, software, or infrastructure engineering experience.
• Demonstrated leadership of complex security initiatives from architecture through production operation.
• Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
• Strong knowledge of endpoint, identity, and SaaS security across Windows and macOS.
• Strong Python or comparable-language software and automation skills, with practical Terraform, CI/CD, GitOps, and security-as-code experience.
• Experience building and operating security platforms, telemetry pipelines, detections, and response automation.
• Experience in regulated financial services or another environment with demanding availability and audit requirements.
• Familiarity with NIST CSF or SP 800-53 is required; brokerage, SEC/FINRA, and privacy compliance experience are preferred.
• Bachelor’s degree in a related field or equivalent practical experience.
• Relevant security, AWS, Kubernetes, or GIAC certifications are preferred.
• Strong architectural judgment, troubleshooting, prioritization, cross-functional influence, and mentoring skills.

Benefits

• New York City and Chicago employees work in the office on a cadence set by the Hiring Manager or team.
• Employees in Austin, Dallas, Denver, Miami, the San Francisco Bay Area, or Seattle may work fully remotely, with occasional onsite visits.
• The role is limited to candidates in the listed locations and does not accommodate remote work outside them.
• Benefits include equity, a 401(k) match, medical, dental, vision, and disability insurance, paid parental leave, wellness reimbursement, a company-provided phone, personal development allowance, generous PTO, and observed holidays.