Principal Security Engineer

EmersonReston, VirginiaOn-siteFull-timePrincipal, 12–15+ yearsListed 1 hour ago

Apply now

About this role

Develops advanced testing tools and methodologies to proactively identify and address security weaknesses. Uses expertise to recognize and escalate complex security violations, ensuring prompt response and resolution. Contributes to compliance assessments, evaluating the effectiveness of security controls and processes. Recommends best practices and independently applies data security tools and techniques, such as encryption, hashing, masking, and access management, to ensure the confidentiality and integrity of sensitive information.
Minimum Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Job Skills:
Same as prior level plus;
Threat Modeling Demonstrated ability in or knowledge of threat modeling, including applying techniques to identify and mitigate security risks and vulnerabilities.
Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.
Technical Writing Demonstrated ability in or knowledge of technical writing, including developing and maintaining accurate technical documentation.
Innovation Demonstrated ability in or knowledge of innovation, including generating or supporting new ideas, technologies, or processes for organizational growth.
Thought Leadership Demonstrated ability to provide thought leadership and drive adoption of best practices within teams or industry.
Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.
Training and Development Demonstrated ability to design and deliver effective training programs to build team and individual capabilities.
Security Assurance Demonstrated ability in or knowledge of security assurance, including providing evidence of meeting security obligations and implementing security gating.

Preferred Job Qualifications
Education and/or Experience:
11 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Bachelor's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 7 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field

OR

Master's Degree in Computer Science, Information Technology, Computer Security, Engineering, or related field AND 5 years of experience in IT security (e.g., cloud, endpoint, logging), vulnerability and risk assessment, identity and access management, compliance, or related field.

Cloud or Internet Software Security Experience:
3 years of experience working on high-impact projects related to cloud or internet software security.

Programming/Scripting Experience:
3 years of experience working with one or more of the following programming or scripting languages (e.g., Go, Java, Python, or C/C++).

Cloud Experience:
2 years of experience with AWS Solution, Azure 900 Fundamentals, OCI Fundamentals, or equivalent cloud experience.

Information Security Certifications:
Information security or equivalent certifications (e.g., Certified Oracle Cloud Infrastructure Security Professional, Certificate of Cloud Security Knowledge [CCSK], Certified Information Security Manager [CISM], Certified Information Systems Security Professional [CISSP], Certified Ethical Hacker [CEH], Certified Cloud Security Professional [CCSP],