Principal Security Engineer
Core
Design and implement security architecture, controls, and automation to proactively identify, assess, and reduce security risk across cloud, network, endpoint, and application environments.
Role type
Principal Security Engineer (hands-on IC with leadership)
Builds
Security tooling (SIEM, EDR, IAM, TPRM, secrets management), automation scripts, incident response playbooks, and security frameworks.
Domain
Enterprise Information Security / Cybersecurity
Required skills
Security architecture design, IAM, EDR, MDM, SIEM, KMS, PAM, incident response, vulnerability management, SAST/DAST, SOX/PCI/NIST CSF/CIS Controls implementation, software development (Java, C#, C++, JavaScript, HTML), infrastructure hardening, encryption, threat intelligence analysis, risk assessment, policy development, automation scripting.
Preferred skills
ISC2, SANS, ISACA certifications.
Technologies
Java, C#, C++, JavaScript, HTML, SIEM, EDR, MDM, KMS, PAM, SAST, DAST, IDS/IPS, firewalls.
Responsibilities
Design and implement security architecture and controls; lead engineering efforts to build and scale security tooling; serve as escalation point for SOC incidents; develop metrics and KPIs for security posture; automate security controls and evidence collection; lead security risk assessments; develop policies and procedures; mentor security analysts and engineers; conduct incident response tabletop exercises; investigate security incidents and lead response activities.
Seniority
Principal, hands-on IC with strategic leadership
