Principal Compliance & Security Engineer
Core
Own security architecture and technical compliance posture across payment, account, and minors' data systems for Step, Feastables, and the media organization.
Role type
Principal Compliance & Security Engineer
Builds
Unified control framework mapped to PCI DSS, COPPA, GDPR/CCPA, and SOC 2; automated compliance evidence collection and monitoring pipelines.
Domain
Fintech, payments, and media technology
Required skills
Security architecture design, cloud security (AWS, GCP), application security, threat modeling, incident response, vulnerability management, regulatory compliance (PCI DSS, COPPA, GDPR, CCPA, SOC 2), security automation, infrastructure-as-code (Terraform), code review
Preferred skills
Fintech or payments experience (money movement, KYC), security certifications (CISSP, CCSP, OSCP), experience standing up security functions at early-stage organizations, AI in security automation
Technologies
AWS, GCP, Terraform
Responsibilities
Lead threat modeling and security reviews for high-risk products; run vulnerability management and drive remediation; design secure-by-default patterns for engineering teams; act as technical lead during PCI DSS and SOC 2 audits; translate regulatory requirements into actionable engineering work
Seniority
Principal, hands-on IC
