About this role
The Principal Security Engineer provides technical leadership and hands-on engineering for security data platforms, reporting applications, and analytics that help operational teams and leadership understand enterprise security posture and make informed risk decisions. The role designs, builds, and operates automated data pipelines, repeatable security metric calculations, and reporting solutions that turn data from multiple systems into accurate, traceable, and actionable information.
Working with security subject matter experts, engineering teams, and program leadership, this engineer translates complex measurement needs into secure, reliable, and maintainable solutions. The role resolves integration and data-quality challenges, applies sound architectural judgment, and independently delivers complex engineering initiatives. It develops and integrates AI-enabled capabilities to improve analysis and reporting, with appropriate validation, human review, and data-access controls.
The Principal Security Engineer owns solutions from design through deployment, ongoing operation, and continuous improvement, while providing technical guidance and strengthening shared engineering practices.
Minimum Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
OR
Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
OR
Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.
Job Skills:
Same as prior level plus;
Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.
Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.
Technical Writing Demonstrated ability in or knowledge of technical writing, including developing and maintaining accurate technical documentation.
Innovation Demonstrated ability in or knowledge of innovation, including generating or supporting new ideas, technologies, or processes for organizational growth.
Thought Leadership Demonstrated ability to provide thought leadership and drive adoption of best practices within teams or industry.
Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.
Training and Development Demonstrated ability to design and deliver effective training programs to build team and individual capabilities.
Security Assurance Demonstrated ability in or knowledge of security assurance, including providing evidence of meeting security obligations and implementing security gating.
Preferred Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
OR
Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field
OR
Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.
Cloud or Internet Software Security Experience:
3 years of experience working on high-impact projects related to cloud or internet software security.
Programming/Scripting Experience:
3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).
Cloud Experience:
2 years of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.
Information Security Certifications:
Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP],