Principal Engineer, Product Security
Core
Formulate and drive adoption of product security strategy, assess security maturity, and embed security into the SDLC for an ambitious multi-cloud commerce product.
Role type
Principal Engineer, Product Security (Strategy & Hands-on IC)
Builds
Secure services and API-first applications on multi-cloud infrastructure
Domain
E-commerce, Cloud Security, DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Product Security strategy formulation, Security architecture design, Threat modeling, Secure code review, Static analysis, DevSecOps implementation, Linux systems, Kubernetes, Terraform, Vault, API security, Web application security, Scripting (JavaScript/Go), Project management, Agile methodology
Preferred skills
Customer-facing security experience, Influence in matrix organizations, Scale-up environment experience, Training and onboarding facilitation, AI tool aptitude
Technologies
Kubernetes, Terraform, Vault, Linux, JavaScript, Go
Responsibilities
Formulate and evangelize product security strategy, Assess and increase security maturity posture, Create standardized security architecture and operational best practices, Track and drive remediation of security risks, Educate product teams on risk assessments and threat modeling, Review requirements and designs for security shortcomings, Embed security tooling into the development process, Collaborate with Product Management and legal/compliance teams, Identify skills gaps and facilitate knowledge sharing
Seniority
Principal, Strategy & Mentorship