Principal Security Engineer Jobs

Ethos

Location:
United States, San Francisco

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

136000.00 - 241000.00 USD / Year

Save Job

Apply Position

Job Description:

We’re seeking a Principal Security Engineer with deep expertise in cloud security, application security, and security architecture to join our growing security team. This role will report directly to CISO. In this role, you'll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks, guiding both strategic security initiatives and day-to-day security engineering operations. This is a high-impact role that will shape the security posture of our platforms and development practices, working across engineering, DevOps, architecture, and compliance teams.

Job Responsibility:

Design and implement secure architectures for applications, APIs, microservices, and containerized workloads
Develop and enforce application security best practices across SDLC
partner with DevOps and engineering teams to integrate security into CI/CD pipelines
Conduct threat modeling, security design reviews, and risk assessments for new and existing systems
Evaluate and implement cloud security tools, controls, and frameworks (e.g., CSPM, CWPP, IAM, KMS, logging, and monitoring)
Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel
Lead response to complex security incidents or architectural flaws
conduct root cause analysis and recommend strategic remediations
Contribute to and influence security policies, standards, and governance
Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations

Requirements:

10+ years of experience in security engineering or architecture roles
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution
Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation)
Strong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling)
Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls
Proficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices
Demonstrated leadership in cross-functional security initiatives and technical mentorship
Ability to come into our San Francisco, CA office once a week

Nice to have:

Certifications such as CISSP, CCSP, AWS Security Specialty, GIAC (GCSA, GWEB, GDSA)
Familiarity with Kubernetes security, service mesh, and cloud-native security tooling
Experience in regulated industries (e.g., fintech, healthcare, SaaS at scale)

Additional Information:

Job Posted:
December 08, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Principal Security Engineer