Senior Principal Software Application Security

Description

This position is a remote position. (see preferred location options on posting)

Summary:

We are seeking a highly experienced Senior Principal Software Application Security to lead the design, development, deployment, and operation of enterprise-scale frameworks and AI solutions in Huntington's Cybersecurity organization. This individual will possess deep expertise across the full software development lifecycle, including architecture, development, testing, security, DevSecOps, cloud engineering, AI agent development, and production operations in order to influence and define cybersecurity frameworks across the organization.

The ideal candidate is a hands-on senior technologist capable of designing and developing complex solutions from concept through production while providing technical leadership, mentoring developers, and establishing engineering standards. This role requires expertise in modern application development, cloud-native architectures, AI-enabled systems, cybersecurity tool integration, container platforms, CI/CD automation, and secure software engineering practices.

Duties & Responsibilities:

• AI Solution Development: Design, build, and deploy AI/ML and generative AI applications to support cybersecurity operations and enterprise use cases.
• Technical Leadership: Serve as a senior technical leader and trusted advisor. Mentor engineers and elevate engineering capabilities across teams. Establish development standards, patterns, and best practices. Evaluate emerging technologies and drive innovation initiatives.
• Security Integration: Embed cybersecurity controls, secure coding practices, and data protection measures into AI applications and development pipelines.
• Cyber Use Case Enablement: Develop solutions for threat detection, alert triage, vulnerability analysis, identity analytics, and risk scoring.
• Automation & Agentic AI: Implement intelligent automation and agent-driven workflows to optimize cyber operations and reduce manual effort.
• Data & Analytics: Engineer pipelines and analytics solutions for processing logs, telemetry, and security data to generate actionable insights.
• Cloud & Platform Engineering: Deploy and manage scalable AI solutions in cloud-native environments using Kubernetes, containers, APIs, and CI/CD pipelines.
• System Integration: Integrate AI applications with enterprise and cybersecurity tools (SIEM, SOAR, IAM, data platforms).
• Governance & Compliance: Ensure alignment with AI governance, regulatory requirements, and secure SDLC practices.
• Collaboration: Partner with engineering, cybersecurity, architecture, cloud, infrastructure, data, and AI governance teams.

Basic Qualifications:

• Bachelor's Degree or 4+ additional years of equivalent experience in Software Development and/or Cybersecurity.
• 8+ years of production support and design of Cyber Security technologies.
• 8+ years of operational experience with security technologies.
• 8+ years of expertise across the full Software Development Lifecycle (SDLC), including requirements, architecture, coding, testing, deployment, operations, and lifecycle management.

Preferred Qualifications:

• Ability to influence the frameworks across cybersecurity applications and tools and gain buy in from stakeholders across the organization.
• 10+ years of software development experience building enterprise applications, platforms, and services.
• Experience developing solutions using multiple programming languages such as Python, Java, C#, JavaScript/TypeScript, Go, SQL, PowerShell, and scripting languages.
• Demonstrated experience designing and developing RESTful APIs, microservices, and event-driven services to support enterprise AI and automation capabilities.
• Experience with agentic AI, Claude code, copilots, RAG architectures, and LLM orchestration frameworks.
• Experience implementing AI governance, model risk management, and security guardrails.
• Ability to build and maintain a centralized AI agent registry that supports agent onboarding, unique agent identification, metadata management, ownership tracking, lifecycle status, versioning, and auditability.
• Experience developing user interfaces and operational dashboards for monitoring, managing, and supporting AI agents, workflows, system health, and service activity.
• Experience in the implementation of cyber security tools (hardware and software).
• Knowledge of data engineering, streaming analytics, and log/telemetry processing.
• Experience integrating applications with identity and access management platforms, including OAuth 2.0, OIDC, scoped tokens, service principals, managed identities, and role-based access controls.

Exempt Status: (Yes = not eligible for overtime pay) ( No = eligible for overtime pay)

Yes

Workplace Type:

Remote

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Note to Agency Recruiters: Huntington Bank will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington Bank colleagues, directly or indirectly, will be considered Huntington Bank property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.