Principal Security Engineer

• Lead evaluation, architecture, implementation, integration, and lifecycle support of enterprise security solutions
• Provide principal-level technical direction and drive systemic risk remediation from design through operations
• Define and implement security architecture, standards, guardrails, and controls across AWS, Google Cloud, Microsoft Azure, hybrid, and multi-cloud environments
• Design identity-centric and zero-trust controls for segmentation, connectivity, federation, encryption, secrets, logging, monitoring, and governance
• Secure servers, endpoints, virtual machines, containers, Kubernetes, serverless services, APIs, databases, storage, and cloud workloads
• Embed security through Infrastructure as Code, reusable modules, reference architectures, architecture reviews, migrations, and cloud modernization
• Establish hardening standards, endpoint controls, centralized visibility, automated patching, vulnerability remediation, and lifecycle processes
• Lead application and AI security policies, secure design patterns, guardrails, threat modeling, red teaming, security testing, and risk assessments
• Develop security requirements, architecture artifacts, technical designs, test plans, policies, standards, procedures, and operational documentation
• Partner with cybersecurity, engineering, product, cloud, infrastructure, networking, operations, application, data, privacy, compliance, legal, architecture, and responsible AI teams
• Influence roadmaps, architecture decisions, development practices, and operating models while balancing security, privacy, compliance, cost, performance, availability, and delivery
• Communicate technical concepts, risk, tradeoffs, and recommendations to engineering, business, executive, and technical decision-maker audiences
• Facilitate design reviews, architecture forums, technical evaluations, incident discussions, and stakeholder decision meetings
• Participate in on-call rotation and support major outages, critical service issues, and cybersecurity incidents

Requirements

• Minimum 8 years of experience
• Extensive experience in cybersecurity engineering, infrastructure or network security, cloud engineering, application security, software engineering, or a related technical discipline
• Significant hands-on experience securing production environments in AWS, Google Cloud, and Microsoft Azure
• Deep knowledge of cloud security architecture, IAM, networking, encryption, logging, monitoring, workload protection, governance, and enterprise network security
• Experience securing Windows and Linux servers, endpoints, databases, containers, Kubernetes, and cloud-hosted workloads
• Hands-on experience designing, integrating, and securing CI/CD pipelines with automated security testing, secure release controls, and policy enforcement
• Experience with Infrastructure as Code, including Terraform, CloudFormation, Bicep, ARM templates, or equivalent tools
• Full-stack engineering experience across front-end applications, back-end services, APIs, databases, cloud services, identity platforms, and infrastructure
• Proficiency in one or more of Python, Go, Java, JavaScript, TypeScript, C#, PowerShell, Bash, or Ruby
• Experience building integrations through APIs, automation, orchestration, and vendor-supported methods
• Strong knowledge of secure software development, application and API security, cloud-native development, containers and registries, Kubernetes security, and software supply chain risks
• Experience with SIEM, EDR, vulnerability management, network security platforms, cloud-native security services, IAM, PAM, secrets, certificates, keys, and cryptographic controls
• Experience developing security requirements, architecture artifacts, technical designs, implementation and test plans, policies, standards, procedures, proofs of concept, product evaluations, technical testing, data analysis, and architecture assessments
• Knowledge of AI security risks and experience applying threat modeling and secure design practices to modern applications, APIs, cloud platforms, or AI-enabled systems
• Demonstrated ability to lead complex, cross-functional technical initiatives and communicate effectively with engineers, administrators, executives, and technical decision-makers
• Strong analytical, problem-solving, troubleshooting, writing, presentation, and stakeholder-management skills
• Ability and willingness to participate in an on-call rotation and support major outages, critical service issues, and cybersecurity incidents
• Bachelor's Level Degree (Required)

Core Competencies

Demonstrates expertise in enterprise security solutions, cloud security architecture, and risk remediation across multi-cloud environments. Proficient in securing production environments, implementing Infrastructure as Code, and leading cross-functional technical initiatives.

Highest-signal resume keywords

• Cloud Security Architecture
• Infrastructure as Code
• Cybersecurity Engineering
• CI/CD Pipeline Security
• Risk Remediation

ATS Optimization Keywords

Hard Skills

• Python
• Go
• Java
• JavaScript
• TypeScript
• C#
• PowerShell
• Bash
• Terraform
• CloudFormation

Soft Skills

• Analytical Skills
• Problem-Solving
• Communication
• Stakeholder Management
• Presentation Skills

Industry Keywords

• Zero-Trust Controls
• Identity-Centric Security
• Secure Software Development
• Threat Modeling
• Application Security

Tools & Technologies

• AWS
• Google Cloud
• Microsoft Azure
• Kubernetes
• SIEM
• EDR
• IAM
• PAM
• Vulnerability Management
• Cloud-Native Security Services