Principal Security Engineer

We’re building a world-class global Security team as part of our Trust Program. ...

Location

India , Hyderabad

Salary:

Not provided

Highspot

Expiration Date

Until further notice

Requirements

10+ years of robust, progressive experience in security engineering, application security, DevSecOps, incident detection and response, or closely related fields
Advanced proficiency in at least one programming language (Python, Ruby, Go, Rust, JavaScript), with deep experience conducting detailed code reviews and security assessments across multiple languages
Hands-on experience with deploying, operating, and interpreting results from security tools such as static analyzers, web vulnerability scanners, supply chain analysis scanners, and host-based intrusion detection systems
Demonstrated experience mentoring, coaching and guiding junior and mid-level security engineers, contributing to a strong team culture, and supporting peer development as a senior individual contributor
Demonstrated proactive approach, strong continuous learning orientation, and curiosity about emerging threats, security trends, and innovative technologies
Extensive expertise securing cloud-native environments (AWS, Azure, GCP, containers, microservices), with in-depth knowledge of modern cloud security risks and defenses
Demonstrated ability to embrace being wrong, practice humility, continuously learn from experiences, and actively seek insights through thoughtful questioning and collaboration

Job Responsibility

Lead comprehensive application security assessments, advanced threat modeling sessions, and secure code reviews across critical product features, internal tooling, endpoints, and third-party integrations
Collaborate strategically with product engineering to establish and enhance secure-by-default and privacy-by-design practices within the software development lifecycle (SDLC)
Lead and otherwise participate in incident detection, investigation, triage, containment, and root cause analysis for high impact security incidents, providing mentorship and guidance to junior engineers as required
Drive the development and continuous improvement of sophisticated detection rules, response automation, and optimized alert management across cloud environments, corporate infrastructure, and SaaS platforms
Lead and participate in complex vulnerability remediation processes, and effectively respond to security issues discovered by both internal teams and external sources
Document technical findings and strategic decisions in a clear and accessible manner, and procedural enhancements
significantly contribute to comprehensive security playbooks and knowledge repositories
Manage and oversee asksecurity@ request handling, and actively participate in sprint-based security activities, balancing strategic and tactical execution
Actively participate in the security on-call rotation, or provide senior-level guidance as required during an event and aid in rapid response capabilities to protect our 24x7 platform and global workforce

Fulltime

Staff Security Engineer

At hyperexponential, we’re building the AI-powered platform that enables the wor...

Location

United Kingdom , London

Salary:

Not provided

hyperexponential

Expiration Date

Until further notice

Requirements

Built or significantly contributed to security programmes from the ground up, establishing foundational security controls, compliance readiness, and incident response capabilities
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent), including multi-account strategies, identity and access management, network security, and data protection
Driven technical security improvements by writing code, building tools, and implementing controls that scaled with company growth
Integrated security into development workflows through DevSecOps practices including automated testing, secrets management, container security, and infrastructure-as-code security
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar), mapping technical controls to compliance requirements and guiding teams through audit cycles
Built trust with engineering teams by contributing technically and making security collaborative and frictionless
Balanced security rigor with business goals, making risk-based trade-offs that enabled growth while protecting customers and the business
Evaluated security implications of AI/ML systems, including understanding AI-specific risks and implementing controls to secure them

Job Responsibility

Build hx's security programme from the ground up, setting direction for security architecture, compliance, and incident response as we scale globally
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform, ensuring systems are secure by design
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines without slowing teams down
Lead or contribute to compliance initiatives (SOC2, ISO27001) by implementing technical controls and working cross-functionally with legal, engineering, and business teams to enable enterprise sales
Build security automation and tooling by writing code and scripts that scale security practices, detect vulnerabilities, and enforce policies efficiently
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions
Act as a trusted voice in critical moments: responding to incidents, unblocking teams on security questions, and keeping high-stakes initiatives secure and on track
Assess and secure AI-powered systems across hx's platform, implementing controls that enable safe adoption of AI while mitigating risks like prompt injection, data leakage, and model vulnerabilities

What we offer

£5,000 training and conference budget for individual and group development
25 days of holiday plus 8 bank holidays (33 days total)
Company pension scheme via Penfold
Mental health support and therapy via Spectrum.life
Individual wellbeing allowance via Juno
Private healthcare insurance through AXA
Income protection and Life Insurance
Cycle to Work Scheme
Top-spec equipment (laptop, screens, adjustable desks, etc.)
Regular remote and in-person hackathons, lunch and learns, socials, and game nights

Fulltime

Security Engineer II

PagerDuty is seeking an Enterprise Security Engineer to join its global IT Opera...

Location

Canada , Toronto

Salary:

122000.00 - 185000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

At least 3 years of experience in the information security industry, with 2+ years in network security or zero-trust, and 2+ years in security architecture or solution experience
Knowledge of Information Security concepts, especially in the areas of security threats, analyzing security logs and driving Incident response
Knowledge and practical experience in network security and zero-trust
Understanding of the IAM cybersecurity landscape, including identity stores, authentication/authorization, strong authentication, and privileged access management capabilities and methodologies
Understanding of security technologies and concepts, including SIEM, MDR/XDR, EDR and vulnerability management
Understanding of security best practices and frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework)
Knowledge of incident response processes

Job Responsibility

Partner closely with CISO organization to design and implement enterprise IT security architectures and solutions
Tracking the evolution of cutting-edge security technologies, and keeping up to date of the latest security threats and trends
Focus on enterprise security and zero-trust technology, serving as the principal technical expert in this area within the Enterprise Security department
Monitors security alerts and leads the team in identifying and responding to security threats
Monitors systems for vulnerabilities, provides prioritization, and drives remediation efforts
Working cross-functionally to triage suspicious activity and drive remediation (performing L2-L3 duties as needed)
Analyzing threat intelligence feeds to develop metrics, alerts, and techniques to protect against new and emerging attack vectors
Develop metrics, thresholds, alerts, dashboards, and incident response playbooks
Drive the design and development of automated security response and maintenance solutions
Oversee our workstation vulnerability management & endpoint compliance program

What we offer

Competitive salary
Comprehensive benefits package
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent

Fulltime

Staff Security Engineer

At hyperexponential, we’re building the AI-powered platform that enables the wor...

Location

Poland , Warsaw

Salary:

Not provided

hyperexponential

Expiration Date

Until further notice

Requirements

Built or significantly contributed to security programmes from the ground up
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent)
Driven technical security improvements by writing code, building tools, and implementing controls
Integrated security into development workflows through DevSecOps practices
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar)
Evaluated security implications of AI/ML systems

Job Responsibility

Build hx's security programme from the ground up
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines
Lead or contribute to compliance initiatives (SOC2, ISO27001)
Build security automation and tooling by writing code and scripts
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions

What we offer

Share Options
25 days of non-working + 14 Polish bank holidays (B2B) / 26 days of holiday + 14 Polish bank holidays (UoP)
£5,000 budget for Learning & Development
Mental Health Support and Therapy via Spectrum Life
Optional access to Healthcare package provided by Luxmed + Multisport (B2B)
Top-spec laptop (MacOS or Windows)
Company pension (UoP)
10 days company sick pay at 100% salary (UoP)
Monthly wellbeing allowance via Juno (UoP)
Healthcare package provided by Luxmed (UoP)

Fulltime

Principal Security Architect

As a Security Architect, your role involves designing, reviewing, and enhancing ...

Location

United States , San Francisco

Salary:

164000.00 - 290000.00 USD / Year

Ethos

Expiration Date

Until further notice

Requirements

7+ years of experience in Information Security with at least 2 years as a Security Architect
Bachelor’s Degree in Computer Science or related field, or an additional 3 years of pertinent work involvement preferred
Strong knowledge of prevalent security architectures, frameworks, standards and emerging threats along with strategies and technologies for defense
Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity & access management, and other core information security concepts
Expertise in cloud computing and its associated best security practices encompassing applications, infrastructure, storage, platforms, and data security
Ability to conduct threat modeling and risk assessments
Ability to come into our San Francisco, CA office once a week

Job Responsibility

Conduct Threat Modeling & Architectural Assessments to cover all Information Security domains to ensure Security by Design
Assess technologies and solutions to develop and enrich security capabilities
Identify security gaps and communicate associated business risks to relevant stakeholders
Craft solutions that harmonize business needs with security and compliance requirements
Verify the effectiveness of security controls in mitigating identified risks
Assist engineering projects across the Software Development Life Cycle (SDLC) and collaborate to prioritize product security elements effectively
Apply expertise in information security and application development to instigate organizational shifts aimed at managing and resolving security weaknesses and vulnerabilities
Contribute to the creation of security policies, standards, and guidelines
Devise and implement frameworks for data classification, retention, and disposal to ensure alignment with data privacy regulations
Spearhead initiatives for data security awareness and training

Fulltime

Principal Cloud Engineer

As the Principal Cloud Engineer, you will play a pivotal role in leading the arc...

Location

United States

Salary:

Not provided

Seamless.AI

Expiration Date

Until further notice

Requirements

Minimum of 7 years of experience managing AWS cloud infrastructure at scale
Strong understanding of core AWS services (EC2, S3, RDS, Lambda, VPC, etc.) and expertise in designing and managing multi-region, scalable cloud architectures
Hands-on experience with Infrastructure as Code (IAC) tools like Terraform or CloudFormation
Proven track record of managing and optimizing cloud costs, using tools like AWS Cost Explorer, Trusted Advisor, or other cost-management platforms
Experience scaling large data systems (including databases, data lakes, and big data platforms) across distributed cloud environments
Expertise in disaster recovery planning, implementation, and management within a cloud infrastructure
Solid understanding of cloud security, including IAM policies, encryption, network security, and proactive threat and vulnerability mitigation strategies
Experience with monitoring and logging tools (e.g., CloudWatch, ELK stack, Prometheus) to ensure infrastructure health and performance
Ability to communicate complex technical concepts to a variety of stakeholders, including non-technical team members
Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent years of work experience

Job Responsibility

Design, implement, and manage highly scalable, secure, and cost-optimized AWS cloud infrastructure
Lead the automation of Infrastructure as Code (IAC) using tools like Terraform, CloudFormation, or similar technologies
Ensure high availability and reliability of systems, implementing disaster recovery and failover strategies
Collaborate with software development and data teams to optimize cloud architecture for large-scale data systems
Implement and maintain security best practices, including monitoring, threat detection, and vulnerability mitigation
Work on optimizing AWS costs while ensuring the infrastructure meets performance and scalability requirements
Stay current with the latest cloud technologies, and continuously improve the cloud environment with new tools and services
Provide technical leadership and mentorship to other engineers, promoting best practices in cloud operations and architecture
Monitor and respond to infrastructure incidents, ensuring timely resolutions and minimal downtime

Fulltime

Principal Engineer, Product Cybersecurity

As Principal Engineer, own and direct the cybersecurity design and analysis of m...

Location

United States , Round Lake; Chicago

Salary:

112000.00 - 154000.00 USD / Year

Baxter

Expiration Date

Until further notice

Requirements

BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
Experience with cybersecurity related software such as Blackduck, Coverity, etc.
Experience dealing with threat intelligence, CWEs and CVEs
Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
Experience with cybersecurity functionality on embedded systems and hosted software applications
Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
Ability to convince management on courses of action with minimal assistance using both written and verbal methods
Must be able to provide solutions that reflect understanding business objectives.

Job Responsibility

Implement proof of concept project to define innovative solutions on platforms/server platforms
Lead implementation of medical device cybersecurity principles as part of an overall security architecture
Create, own, and maintain system requirements, architectures, risk analysis and other specifications that define the cybersecurity functionality of medical device systems both embedded and hosted
Create threat models of medical device systems and the interfaces between medical devices
Perform vulnerability scanning of medical device systems and analyze results
Monitor threat intelligence and analyze CWEs and CVEs that affect medical device systems and propose solutions
Drive cybersecurity improvements through the cross functional teams, primarily software
Lead discussions to resolve competing constraints between interrelated functions (Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, Marketing, Service)
Ensure compliance to the product development process and Quality System and Design Control requirements
Interface with regulatory bodies, representing Baxter and Baxter products, and ensure that regional cybersecurity needs are met

What we offer

Support for Parents
Continuing Education/Professional Development
Employee Health & Well-Being Benefits
Paid Time Off
2 Days a Year to Volunteer
Medical and dental coverage
Insurance coverage for basic life, accident, short-term and long-term disability, and business travel accident insurance
Employee Stock Purchase Plan (ESPP)
401(k) Retirement Savings Plan
Flexible Spending Accounts

Fulltime

Senior Principal Machine Learning Engineer

You’ll form a new team of passionate engineers dedicated to building and scaling...

Location

United States

Salary:

222300.00 - 348975.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor’s, Master’s, or PhD in Computer Science, Statistics, Mathematics, or a related field, or equivalent practical experience
12+ years of industry experience in machine learning, data science, or AI, with a proven track record of delivering production-grade ML systems
Deep expertise in Python, Go, or Java, with the ability to write performant, production-quality code
familiarity with SQL, Spark, and cloud data environments (e.g., AWS, GCP, Databricks)
Experience building and scaling ML models for business-critical applications, ideally in security, privacy, anti-abuse, or compliance domains
Strong communication skills, able to explain complex ML concepts to diverse audiences and influence stakeholders
Demonstrated ability to solve ambiguous, complex problems and drive projects from ideation to production
Agile development mindset, with a focus on iterative improvement and business impact

Job Responsibility

Lead AI/ML Strategy for Trust: Drive the development and implementation of advanced machine learning algorithms and AI systems for Trust, Security, Product Abuse, and Compliance use cases (e.g., threat detection, vulnerability management, privacy automation, AI safety)
Architect and Scale ML Platforms: Design and build scalable, secure, and reliable ML infrastructure and pipelines, ensuring compliance with privacy and regulatory requirements
AI Safety and Responsible AI: Develop and champion AI safety practices, including output moderation, explainability, and alignment with evolving regulatory frameworks
Cross-Functional Collaboration: Partner with product, engineering, security, privacy, and analytics teams to deliver transformative AI/ML solutions that enhance Atlassian’s trust posture
Mentorship and Leadership: Mentor and guide ML engineers and data scientists, fostering a culture of technical excellence, innovation, and continuous improvement
Innovation and Research: Stay at the forefront of AI/ML research, evaluating and applying the latest techniques (e.g., LLMs, anomaly detection, privacy-preserving ML) to real-world Trust challenges
Platform Enablement: Build reusable ML services and APIs that empower other teams to integrate AI/ML into their products and workflows
Operational Excellence: Ensure high availability, reliability, and security of all ML-powered Trust platforms and services

What we offer

health and wellbeing resources
paid volunteer days
benefits, bonuses, commissions, and equity

Fulltime

Principal Security Engineer - Vulnerability management

Hewlett Packard Enterprise

Location:
India , Bangalore

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
February 20, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Security Engineer - Vulnerability management