Principal Product Security Engineer

What you'll do

• Define security strategy and guardrails, including for AI-assisted development, and embed security into product roadmaps and engineering workflows.
• Lead initiatives for secure SDLC, vulnerability reduction and remediation automation, and security assurance programs.
• Advise senior leaders, mentor security engineers, and translate threats and compliance frameworks into practical controls.

What they ask for

• 10+ years in software, product, or application security, owning complex products or platforms.
• Deep expertise in secure architecture and system design for cloud-native or distributed systems, including authentication, authorization, and defense-in-depth.
• Experience driving organization-wide security programs and risk management from design through rollout.
• Hands-on familiarity with containers, Kubernetes, public cloud, security compliance frameworks, security automation in at least one language, and CI/CD integration.

Nice to have

• Background in software supply-chain security, including SBOMs, SLSA, provenance, signing, or build-system hardening.
• Red-teaming or offensive security experience, or open-source development in security-sensitive projects.

Tools

Kubernetes, Go, Python, Shell, CI/CD, STIGs, CIS, SOC 2

AI focus

Define security guardrails for AI-assisted development across design, coding, testing, review, deployment, and operations; experience with AI SDLC programs is sought.