Principal Engineer - Agentic Security Operations (remote)

Principal Engineer, Threat Detection EngineeringJoin our Security Operations Center (SOC) and lead the architecture and hands-on implementation of Agentic Security Operations capabilities across the SOC. You will build governed agent capabilities to support data onboarding, detection engineering, threat hunting, investigation, response, automation, and platform operations. Our goal is to expand threat visibility, accelerate security outcomes, reduce repetitive work, and improve operational consistency and resilience without compromising sound security judgment, human accountability, or control.What You'll BringExtensive experience designing and operating enterprise security, software, data, or distributed systems at scale.Demonstrated success as a principal-level technical leader while remaining actively involved in architecture, prototyping, coding, testing, and production delivery.Hands-on experience delivering production AI-assisted or agentic systems that use tools, memory, retrieval, planning, and structured workflows.Strong understanding of security operations, including telemetry management, detection engineering, threat hunting, triage, investigation, response, and automation.Experience with high-volume streaming and batch data pipelines, object-based storage, elastic analytics, distributed query, schema management, and data-quality controls.Experience designing modular agents, reusable capabilities, workload routing, local and managed execution, and human-in-the-loop workflows.Deep understanding of grounding, retrieval, source attribution, context freshness, permission inheritance, and protection against untrusted or manipulated context.Experience evaluating nondeterministic systems using versioned test sets, historical replay, synthetic scenarios, regression testing, and measurable outcome criteria.Strong software-engineering practices, including source control, automated testing, continuous delivery, infrastructure automation, peer review, and rollback.Experience designing secure APIs, event-driven integrations, workload identities, authorization boundaries, secrets management, and auditable action execution.Knowledge of AI security risks such as prompt injection, data poisoning, excessive agency, sensitive-data exposure, insecure tool use, and model or workflow drift.Strong production-engineering experience covering observability, service objectives, capacity, failure isolation, continuity, recovery, and operational support.Ability to evaluate emerging capabilities critically, distinguish demonstrated functionality from product claims, and validate architectural assumptions through controlled testing.Excellent written and verbal communication skills, including the ability to document architectures, operating models, engineering standards, and executive recommendations.Ability to lead through influence and work effectively across organizational and technical boundaries.Hands-on experience with cloud-scale data and analytics platforms supporting security operations, including distributed query, high-volume data processing, object storage, schema management, data pipelines, and the operational patterns required to run security analytics at scale (e.g., Databricks, Snowflake, etc.)Experience operating and migrating security analytics and detection workloads across modern platforms, along with strong working knowledge of major public cloud environments (AWS, Azure, GCP) and the identity, networking, logging, data protection, and workload-security controls required to secure them.A minimum of 10 years' experience in cybersecurity or relevant fields.Bachelor's degree in computer science, Information Technology, Cybersecurity, a related field, or equivalent work experience.Preferred certifications such as, GASAE, GAIPS, GDSA, GCDA, CEH, OSCP, CISSP, etc.Pay Range: $170,900.00 - $227,900.00 Annually