Principal Engineer - Information Security Job at Tucows

Principal Security Engineer

We’re seeking a Principal Security Engineer with deep expertise in cloud securit...

Location

United States , San Francisco

Salary:

136000.00 - 241000.00 USD / Year

Ethos

Expiration Date

Until further notice

Requirements

10+ years of experience in security engineering or architecture roles
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution
Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation)
Strong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling)
Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls
Proficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices
Demonstrated leadership in cross-functional security initiatives and technical mentorship
Ability to come into our San Francisco, CA office once a week

Job Responsibility

Design and implement secure architectures for applications, APIs, microservices, and containerized workloads
Develop and enforce application security best practices across SDLC
partner with DevOps and engineering teams to integrate security into CI/CD pipelines
Conduct threat modeling, security design reviews, and risk assessments for new and existing systems
Evaluate and implement cloud security tools, controls, and frameworks (e.g., CSPM, CWPP, IAM, KMS, logging, and monitoring)
Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel
Lead response to complex security incidents or architectural flaws
conduct root cause analysis and recommend strategic remediations
Contribute to and influence security policies, standards, and governance
Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations

Fulltime

Principal Software Engineer – Cloud Security

Principal Software Engineer – Cloud Security role at Hewlett Packard Enterprise,...

Location

Israel , Tel Aviv

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or master’s degree in computer science, engineering, information systems, or closely related quantitative discipline
Typically, 10-15 years’ experience
Deep expertise in software systems design, development methodologies, and integration across diverse platforms and technologies
Strong business acumen, focusing on aligning technological initiatives with business goals and driving sustainable growth and profitability
Exceptional analytical and problem-solving skills, with the ability to navigate complex technical challenges and drive impactful solutions
Track record of driving technological innovation, with a portfolio of patents and successful product deployments
Exceptional communication and stakeholder management skills, with the ability to effectively convey complex technical concepts to non-technical audiences and influence decision-making at the executive level

Job Responsibility

Leads the identification, evaluation, and adoption of cutting-edge technologies, innovations, and strategic partnerships to drive growth and competitiveness
Drives developing and implementing robust methodologies, standards, and best practices for software systems design, development, and integration
Leverages recognized domain expertise and experience to influence decisions
Collaborates with executive leadership to align technology initiatives with business objectives, ensuring technology investments deliver measurable value and impact
Champion a culture of continuous innovation, thought leadership, and excellence in software systems design and help build technical community
Provides strategic guidance and mentorship to senior technical teams, fostering a culture of collaboration, creativity, and high-performance outcomes
Analyzes science, engineering, business, and other data processing problems to develop and implement solutions to complex application problems, system administration issues, or network concerns

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Principal System Security Engineer

Owl’s Principal System Security Engineer ensures our mission-critical security p...

Location

United States , Columbia

Salary:

Not provided

Owl Cyber Defense

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in a technical discipline (Master’s degree preferred)
Twelve+ years of experience in security and vulnerability analysis
Five+ years in a security leadership position
Cross-Domain Solutions (CDS) Familiarity
Experience with secure software development principles
Strong communication and collaboration skills across product teams
Excellent problem-solving and critical-thinking skills
Understanding of Agile/Scrum methodologies and tools (Git, JIRA)
Ability to prioritize tasks effectively
Experience in hiring, scaling teams, and managing remote engineering teams

Job Responsibility

Work as a cross functional technical engineer to provide system engineering, cyber security, solution architecture and product integration across various internal teams
Lead system and security engineering and integration reviews of new features and capabilities in current product portfolio and new products
Conduct technical deep dive TEMs and security architectural reviews
Work to understand the operational, functional and security requirements as they relate to mission and deployment environments
Work with solution architects and sales engineers to ensure system designs, implementations, configurations and integrations into operational environments are compliant from a security perspective
Assist in design engineering and development efforts to implement Raise the Bar (RTB) compliance
Facilitate products through the Cross Domain Solutions (CDS) processes
Support the development of related technical and information/ decision briefs, as well as patching and upgrades briefings
Collaborate with software development and network operations teams to integrate secure data transfer practices into the Software Development Lifecyle
Work with SW developers to ensure RTB compliance

Principal Security Governance Engineer

The Principal Security Governance Engineer will lead the development and impleme...

Location

United States , San Francisco

Salary:

183800.00 - 295200.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
10+ years of experience in security governance, risk management, and compliance, preferably in a large-scale SaaS/Product environment
Strong knowledge of cybersecurity principles, technology-related regulations, and IT governance frameworks
Experience in leading security awareness and training programs
Excellent communication, documentation, presentation and leadership skills, with the ability to influence and engage stakeholders at all levels
CRISC, CISSP, CISA, or equivalent certifications are preferred.

Job Responsibility

Design and implement comprehensive security governance frameworks and risk management strategies using Atlassian products, tools and systems
Evaluate and report on the effectiveness of security controls and compliance with relevant laws and regulations, including HIPAA
Collaborate with cross-functional teams to integrate security practices into all aspects of the organization
Assume the HIPAA Security Officer role to ensure compliance with HIPAA security requirements
Develop and maintain policies and procedures to protect sensitive health information in Atlassian products and services
Conduct security audits and assessments to ensure ongoing compliance and address any gaps
Develop and implement security awareness and training programs to mitigate human risk factors
Conduct regular training sessions and workshops to educate employees on security best practices
Monitor, evaluate and improve HRM programs such as phishing simulations, mandatory training, threat intelligence liaison and audit support
Provide leadership and guidance to the Security Governance team, fostering a culture of security awareness and continuous improvement

What we offer

benefits, bonuses, commissions, and equity

Fulltime

Principal Security Architect

As a Security Architect, your role involves designing, reviewing, and enhancing ...

Location

United States , San Francisco

Salary:

164000.00 - 290000.00 USD / Year

Ethos

Expiration Date

Until further notice

Requirements

7+ years of experience in Information Security with at least 2 years as a Security Architect
Bachelor’s Degree in Computer Science or related field, or an additional 3 years of pertinent work involvement preferred
Strong knowledge of prevalent security architectures, frameworks, standards and emerging threats along with strategies and technologies for defense
Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity & access management, and other core information security concepts
Expertise in cloud computing and its associated best security practices encompassing applications, infrastructure, storage, platforms, and data security
Ability to conduct threat modeling and risk assessments
Ability to come into our San Francisco, CA office once a week

Job Responsibility

Conduct Threat Modeling & Architectural Assessments to cover all Information Security domains to ensure Security by Design
Assess technologies and solutions to develop and enrich security capabilities
Identify security gaps and communicate associated business risks to relevant stakeholders
Craft solutions that harmonize business needs with security and compliance requirements
Verify the effectiveness of security controls in mitigating identified risks
Assist engineering projects across the Software Development Life Cycle (SDLC) and collaborate to prioritize product security elements effectively
Apply expertise in information security and application development to instigate organizational shifts aimed at managing and resolving security weaknesses and vulnerabilities
Contribute to the creation of security policies, standards, and guidelines
Devise and implement frameworks for data classification, retention, and disposal to ensure alignment with data privacy regulations
Spearhead initiatives for data security awareness and training

Fulltime

Principal Solutions Engineer

As a Principal Solutions Engineer at Valimail, you will play a critical role at ...

Location

United States

Salary:

160000.00 - 180000.00 USD / Year

Valimail

Expiration Date

Until further notice

Requirements

7+ years in a customer-facing technical role (e.g., Solutions Engineer, Sales Engineer, or Technical Account Manager), preferably in cybersecurity or SaaS
Deep understanding of email security technologies (e.g., SPF, DKIM, DMARC, phishing protection, secure email gateways, DNS) and modern threat landscapes
Exceptional communication and presentation skills, with the ability to explain technical concepts to both technical and non-technical audiences
Proven track record of working collaboratively with Sales, Product, and Customer Success teams
Experience engaging with enterprise customers, including conducting POCs and managing complex security evaluations
Passion for customer advocacy and an instinct for identifying opportunities to create value across the customer lifecycle
Bachelor's degree in Computer Science, Information Security, or a related technical field (or equivalent experience)
Reside in a Central Time or Eastern Time location

Job Responsibility

Serve as a primary technical resource supporting new logo, expansion and renewal sales cycles
Conduct tailored product demos, domain analyses, and technical deep-dives that showcase the value of our email security platform to prospective customers
Collaborate closely with Account Management and Product to relay customer feedback and advocate for features and enhancements that improve user experience and adoption
Develop and deliver technical documentation content to support customer onboarding and education as well as Sales team onboarding and continuing education on the product and the competitive landscape
Contribute to industry events, webinars, and public-facing thought leadership in partnership with the Marketing and Advocacy teams
Act as a subject matter expert (SME) on DMARC and other authentication technologies, threat trends, and integration strategies across complex enterprise environments
Serve as a key company contact for security-related inquiries, including completing security questionnaires for potential clients and partners. Collaborate with internal teams to support current security certifications and pursue future ones like FedRamp renewals.

What we offer

Competitive pay + a comprehensive benefits plan including health, dental, + vision coverage
Remote First Company, you can work anywhere within the US
Unlimited and flexible PTO

Fulltime

Security Engineer II

PagerDuty is seeking an Enterprise Security Engineer to join its global IT Opera...

Location

Canada , Toronto

Salary:

122000.00 - 185000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

At least 3 years of experience in the information security industry, with 2+ years in network security or zero-trust, and 2+ years in security architecture or solution experience
Knowledge of Information Security concepts, especially in the areas of security threats, analyzing security logs and driving Incident response
Knowledge and practical experience in network security and zero-trust
Understanding of the IAM cybersecurity landscape, including identity stores, authentication/authorization, strong authentication, and privileged access management capabilities and methodologies
Understanding of security technologies and concepts, including SIEM, MDR/XDR, EDR and vulnerability management
Understanding of security best practices and frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework)
Knowledge of incident response processes

Job Responsibility

Partner closely with CISO organization to design and implement enterprise IT security architectures and solutions
Tracking the evolution of cutting-edge security technologies, and keeping up to date of the latest security threats and trends
Focus on enterprise security and zero-trust technology, serving as the principal technical expert in this area within the Enterprise Security department
Monitors security alerts and leads the team in identifying and responding to security threats
Monitors systems for vulnerabilities, provides prioritization, and drives remediation efforts
Working cross-functionally to triage suspicious activity and drive remediation (performing L2-L3 duties as needed)
Analyzing threat intelligence feeds to develop metrics, alerts, and techniques to protect against new and emerging attack vectors
Develop metrics, thresholds, alerts, dashboards, and incident response playbooks
Drive the design and development of automated security response and maintenance solutions
Oversee our workstation vulnerability management & endpoint compliance program

What we offer

Competitive salary
Comprehensive benefits package
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent

Fulltime

Principal Engineer, Product Cybersecurity

As Principal Engineer, own and direct the cybersecurity design and analysis of m...

Location

United States , Round Lake; Chicago

Salary:

112000.00 - 154000.00 USD / Year

Baxter

Expiration Date

Until further notice

Requirements

BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
Experience with cybersecurity related software such as Blackduck, Coverity, etc.
Experience dealing with threat intelligence, CWEs and CVEs
Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
Experience with cybersecurity functionality on embedded systems and hosted software applications
Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
Ability to convince management on courses of action with minimal assistance using both written and verbal methods
Must be able to provide solutions that reflect understanding business objectives.

Job Responsibility

Implement proof of concept project to define innovative solutions on platforms/server platforms
Lead implementation of medical device cybersecurity principles as part of an overall security architecture
Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
Create threat models of medical device systems and the interfaces between medical devices
Perform vulnerability scanning of medical device systems and analyze results
Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
Drive cybersecurity improvements through the cross functional teams, primarily software
Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
Ensure compliance to the product development process and Quality System and Design Control requirements
Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met

What we offer

Support for Parents
Continuing Education/Professional Development
Employee Health & Well-Being Benefits
Paid Time Off
2 Days a Year to Volunteer
Medical and dental coverage
Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP)
401(k) Retirement Savings Plan
Flexible Spending Accounts

Fulltime

Principal Engineer - Information Security

Tucows

Location:
Canada; United States

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 29, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Engineer - Information Security

Principal Security Engineer

Principal Software Engineer – Cloud Security

Principal System Security Engineer

Principal Security Governance Engineer

Principal Security Architect

Principal Solutions Engineer

Security Engineer II

Principal Engineer, Product Cybersecurity

Principal Engineer - Information Security

Tucows

Location:Canada; United States

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:December 29, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Engineer - Information Security

Principal Security Engineer

Principal Software Engineer – Cloud Security

Principal System Security Engineer

Principal Security Governance Engineer

Principal Security Architect

Principal Solutions Engineer

Security Engineer II

Principal Engineer, Product Cybersecurity

Location:
Canada; United States

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 29, 2025