Principal Security Engineer

Accountabilities

• Build and maintain offensive security agents that automate reconnaissance, enumeration, vulnerability validation, and other security testing activities across web applications, APIs, and cloud environments.
• Develop agentic workflows that support attack surface management and vulnerability management programs while improving the efficiency and consistency of security operations.
• Design automation that combines deterministic technologies such as APIs, infrastructure-as-code, and data pipelines with non-deterministic Large Language Model (LLM)-driven capabilities where appropriate.
• Integrate security tools with ticketing platforms, asset inventories, Continuous Integration/Continuous Delivery (CI/CD) pipelines, threat intelligence sources, and other enterprise systems.
• Apply established architectural patterns, security standards, governance requirements, and human-in-the-loop controls when developing AI-enabled security capabilities.
• Validate findings generated by automated systems, reproduce vulnerabilities, and contribute to risk assessment, prioritization, and remediation activities.
• Develop monitoring, testing, and evaluation mechanisms that improve the reliability, accuracy, and operational effectiveness of agentic security systems.
• Support penetration testing and purple-team exercises focused on validating vulnerabilities, security controls, detection capabilities, and remediation effectiveness.
• Partner with Cyber Threat Intelligence, Security Engineering, and Vulnerability Management teams to strengthen security detection, response, and remediation capabilities.
• Identify technical risks and opportunities for improvement, raise concerns proactively, and contribute to the evolution of security tools, engineering practices, and automation strategies.
• Document technical processes and develop software or AI-enabled solutions that reduce repetitive work and improve security workflows.
• Provide technical leadership in applying AI, automation, and modern software engineering approaches to offensive security challenges.

Requirements

• 10+ years of professional experience in software engineering, offensive security, penetration testing, application security, or a closely related technical discipline.
• Bachelor’s degree in Computer Science, Cybersecurity, Security, or another technical field is preferred, with a Master’s degree considered an advantage.
• Demonstrated experience building, deploying, and supporting production software, automation platforms, or security tooling.
• Hands-on experience developing or extending AI-enabled workflows, agentic systems, or LLM-powered automation solutions.
• Familiarity with agent frameworks, orchestration patterns, structured context, tool integration, and approaches for evaluating AI-enabled systems.
• Strong software development and integration skills using APIs, cloud services, automation frameworks, and data pipelines.
• Experience using AI-assisted development tools and LLM technologies to accelerate engineering, automation, and security outcomes.
• Strong understanding of the capabilities, limitations, reliability considerations, and operational requirements of production AI systems.
• Hands-on experience testing modern web applications, APIs, and cloud environments.
• Strong knowledge of OWASP Top 10 vulnerabilities, authentication and authorization weaknesses, business logic flaws, exploit validation, and application security testing techniques.
• Experience assessing cloud environments, including identity and access management, configuration risks, and common cloud attack paths.
• Familiarity with offensive security tools, penetration testing methodologies, vulnerability analysis, and remediation workflows.
• Experience integrating security capabilities into CI/CD pipelines and developer workflows is preferred.
• Experience in healthcare, financial services, or another highly regulated industry is preferred.
• Working knowledge of frameworks and standards such as HIPAA, SOC 2, NIST Cybersecurity Framework, or comparable security and compliance frameworks is preferred.
• Relevant certifications such as Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), cloud security certifications, or comparable offensive security credentials are preferred.
• Ability to communicate complex technical risks and security findings effectively to both technical and non-technical audiences.
• Strong judgment and problem-solving skills, with the ability to balance security requirements, engineering practicality, and business objectives.
• Demonstrated ability to collaborate effectively across cross-functional engineering and security teams.

Benefits

• Annual salary range of $133,000–$173,000, with actual compensation based on factors including location, education, skills, experience, and qualifications.
• Eligibility for performance-based incentives as part of the total compensation package.
• Medical, dental, and vision coverage.
• Health Savings Account (HSA) contribution and matching.
• Dependent Care Flexible Spending Account (FSA) matching.
• Uncapped paid time off.
• Paid parental leave.
• 401(k) retirement plan with company matching.
• Personal and healthcare financial literacy programs.
• Ongoing education and tuition assistance.
• Gym and fitness reimbursement.
• Wellness program incentives.
• Fully remote work opportunity within the United States.
• Remote onboarding with an in-person onboarding training component held onsite periodically; required travel and accommodations are covered.
• Opportunity to work on advanced AI-powered security automation, offensive security, cloud environments, and vulnerability management.
• Exposure to highly regulated technology and security environments and cross-functional security teams.