Principal Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Enhance security throughout CI/CD pipelines, infrastructure, dependencies, and deployment processes.

• Develop secure and dependable software delivery methodologies.

• Take ownership of and advance vulnerability scanning and remediation capabilities, including tooling, automation, prioritization, and integration into engineering workflows.

• Collaborate with engineering teams to bolster application, cloud, and infrastructure security.

• Mitigate risks associated with customer data, access controls, APIs, and third-party integrations.

• Lead threat modeling and conduct security reviews for critical systems.

• Investigate AI security features using tools and models such as Daybreak and Mythos.

• Assist teams in managing risks posed by AI-assisted development, agents, and LLM integrations.

• Work alongside engineering leadership to identify deficiencies, prioritize enhancements, and set security standards and processes.

• Oversee security initiatives from the design phase through to implementation.

• Shape technical decisions and cultivate security expertise across engineering teams.

• Identify and prioritize significant risks in the first year.

• Establish security practices that seamlessly integrate into software development and operations.

⛳️ Requirements

• Strong engineering background in software, platform, infrastructure, or security engineering.

• Practical experience in building and managing complex systems.

• Solid foundation in security principles and hands-on experience enhancing security in software development, cloud infrastructure, or production settings.

• Background in software delivery security, including CI/CD, vulnerability management, supply chain security, or related fields.

• Knowledge of SaaS security, encompassing customer data protection, application security, and operation of cloud-based services.

• Interest in emerging AI security capabilities and an understanding of risks posed by AI.

• Capability to lead complex initiatives, collaborate across teams, and balance security with engineering requirements.

• Familiarity with software supply chain security, including SLSA, SBOMs, artifact signing, or build provenance.

• Experience with SAST, SCA, and container scanning.

• Familiarity with AWS and Kubernetes.

• Knowledge of threat modeling, application security, identity, or secrets management.

• Awareness of AI-powered security tools and the safeguarding of AI-assisted development workflows.

• Experience in establishing or enhancing security engineering practices in a growing organization.

• Legally authorized to work in the United States.

• Must address current or future employment visa sponsorship needs.

🏝️ Benefits

• Competitive salary and benefits package.

• Stock options.

• 401(k) matching.

• Adventure Travel Stipend on each anniversary of your employment with Aiwyn.

• Remote-first work environment.

• Access to top-tier AI tools.

• Freedom to tackle meaningful and challenging problems alongside other high-performing individuals.

• AI-by-Default work culture that encourages curiosity and experimentation.