Principal Security Engineer

About the role

We’re seeking a Principal Security Engineer with deep expertise in application security, AI security, and security architecture to join our growing security team. This role reports directly to the CISO. You’ll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks – including AI‑powered tooling – guiding both strategic security initiatives and day‑to‑day security engineering operations.

Key responsibilities

• Design and implement secure architectures for applications, APIs, microservices, and containerized workloads.
• Develop and enforce application security best practices across the SDLC and integrate security into CI/CD pipelines.
• Conduct threat modeling, security design reviews, and risk assessments for new and existing systems.
• Own the AI security program, including risk frameworks, threat models, and governance policies for AI/ML and LLM integrations.
• Review AI tool features and model updates for security risks such as prompt injection, data leakage, and model poisoning.
• Lead response to complex security incidents, perform root‑cause analysis, and recommend strategic remediations.

Required profile

• 10+ years of experience in security engineering or architecture.
• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• Proven leadership in cross‑functional security initiatives and technical mentorship.
• Hands‑on experience assessing security risks of AI/ML systems and applying frameworks like NIST AI RMF, OWASP LLM Top 10, or MITRE ATLAS.
• Experience designing zero‑trust architectures, secure API gateways, and identity/access controls.
• Familiarity with regulated environments such as fintech or healthcare is a plus.

Required skills

• AWS cloud platform
• Terraform and CloudFormation (IaC)
• Python, Go, JavaScript
• OWASP Top 10, SAST, DAST
• Threat modeling
• Zero‑trust architecture
• API gateway security
• Kubernetes security and service mesh
• AI/ML security frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS)