Principal Security Engineer

The core responsibilities for the job include the following:

Core Security Engineering:

• Design and implement secure architectures for applications, APIs, microservices, and containerized workloads.
• Develop and enforce application security best practices across the SDLC; partner with DevOps and engineering teams to integrate security into CI/CD pipelines.
• Conduct threat modelling, security design reviews, and risk assessments for new and existing systems.
• Evaluate and implement security tools, controls, and frameworks. Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel.
• Lead response to complex security incidents or architectural flaws; conduct root cause analysis and recommend strategic remediations.
• Contribute to and influence security policies, standards, and governance.
• Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations.

AI Security:

• Own the AI security program, including risk frameworks, threat models, and governance policies for AI/ML systems and LLM integrations.
• Review new AI tool features and model updates for security risks before adoption, covering prompt injection, data leakage, model poisoning, and supply chain threats.
• Track and apply industry guidance from NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, and CISA; translate standards into actionable internal controls and secure configuration baselines.
• Embed AI security reviews into the feature development lifecycle, including predeployment red-teaming and adversarial testing of AI-powered features.
• Monitor AI regulatory developments and advise on security and compliance implications for the organization.

Requirements:

• 10+ years of experience in security engineering or architecture roles.
• Bachelor's degree in cybersecurity, information technology, computer science, or a related field from a reputable institution.
• Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e. g., Terraform and CloudFormation).
• Strong experience in secure software development and application security (e. g., OWASP Top 10, SAST, DAST, and threat modelling).
• Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls.
• Proficient in scripting or development languages (e. g., Python, Go, JavaScript) and secure coding practices.
• Demonstrated leadership in cross-functional security initiatives and technical mentorship.
• Hands-on experience assessing security risks of AI/ML systems, including familiarity with OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF.
• Demonstrated ability to evaluate new AI tool features and vendor releases for security implications and to produce clear risk assessments and secure configuration guidance.
• Experience researching and applying industry security guidance, translating standards and frameworks into organizational controls and policies.