Principal Security Engineer

About the role

What you’ll be doing

We're looking for a Principal Security Engineer to lead application security, cloud security, and compliance initiatives across client engagements. You'll set security architecture standards, run threat modeling and penetration testing, and act as the senior technical authority on security for our Cybersecurity practice.

• Lead security architecture reviews and threat modeling for client applications and infrastructure
• Design and run penetration testing, vulnerability assessments, and remediation plans
• Define secure SDLC standards and shift-left security practices across engineering teams
• Own cloud security posture management across AWS, GCP, and Azure client environments
• Guide clients through compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS)
• Respond to and lead investigation of security incidents when they arise
• Mentor engineers on secure coding practices and security tooling adoption

• 8+ years in security engineering, with senior/principal-level scope
• Deep expertise in application security, cloud security, and secure architecture design
• Hands-on penetration testing and vulnerability assessment experience
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, HIPAA, or PCI-DSS
• Relevant certifications (OSCP, CISSP, or equivalent) preferred
• Experience integrating security scanning into CI/CD pipelines
• Strong communication skills for advising both engineers and client executives