Principal Product Security Engineer
Core
Principal Product Security Engineer setting long-term security direction, leading reviews, and implementing controls for cloud-native, customer-managed, and hybrid products processing high-volume data.
Role type
Principal Product Security Engineer (hands-on IC)
Builds
Cloud-native, customer-managed, and hybrid products for large enterprises
Domain
Cloud Security, FedRAMP Compliance, AI/Agentic Systems Security
Required skills
Cloud security (AWS/Azure), FedRAMP/NIST SP 800-53 implementation, Threat modeling, Secure code review, Vulnerability management, IAM/Workload identity, Cryptography, Infrastructure as code, Penetration testing coordination, Security automation
Preferred skills
AI/Agentic systems security, Observability platforms, High-volume data pipelines
Technologies
AWS, Azure, Kubernetes, Serverless, CI/CD, SAST, SCA, JavaScript, TypeScript, Python, Go
Responsibilities
Set long-term product and cloud security direction; Lead Product Security Reviews for distributed SaaS; Translate risk into engineering requirements and secure defaults; Serve as cloud security authority across IAM, encryption, and containers; Lead Product Security component of FedRAMP engineering; Investigate vulnerabilities and coordinate remediation; Build and operate security capabilities in CI/CD and IaC; Scope external penetration tests; Lead multi-team work through high-stakes situations; Mentor Product Security engineers; Evaluate emerging technologies like AI-assisted security.
Seniority
Principal, hands-on IC with strategic influence
