Principal Security Engineer

About the role

We’re seeking a Principal Security Engineer with deep expertise in cloud security, application security, and security architecture to join our growing security team. This role will report directly to CISO. In this role, you'll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks, guiding both strategic security initiatives and day-to-day security engineering operations.

This is a high-impact role that will shape the security posture of our platforms and development practices, working across engineering, DevOps, architecture, and compliance teams.

Duties and Responsibilities:

•  Design and implement secure architectures for applications, APIs, microservices, and containerized workloads.
• Develop and enforce application security best practices across SDLC; partner with DevOps and engineering teams to integrate security into CI/CD pipelines.
• Conduct threat modeling, security design reviews, and risk assessments for new and existing systems.
• Evaluate and implement cloud security tools, controls, and frameworks (e.g., CSPM, CWPP, IAM, KMS, logging, and monitoring).
• Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel.
• Lead response to complex security incidents or architectural flaws; conduct root cause analysis and recommend strategic remediations.
• Contribute to and influence security policies, standards, and governance.
• Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations.

Qualifications and Skills:

• 10+ years of experience in security engineering or architecture roles.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution.
• Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation).
• Strong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling).
• Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls.
• Proficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices.
• Demonstrated leadership in cross-functional security initiatives and technical mentorship.
• Ability to come into our San Francisco, CA office once a week.

Preferred Qualifications:

• Certifications such as CISSP, CCSP, AWS Security Specialty, GIAC (GCSA, GWEB, GDSA).
• Familiarity with Kubernetes security, service mesh, and cloud-native security tooling
• Experience in regulated industries (e.g., fintech, healthcare, SaaS at scale).

#LI-Hybrid #LI-JA1

The US national base salary range for this full-time position is $114,000 - $269,000. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. 

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include applicable bonus, equity, or benefits. 

You can find further details of our US benefits at https://www.ethoslife.com/careers/