Principal Product Security Engineer

Role overview Set product and cloud security direction as a senior individual contributor working across application security, cloud infrastructure, and regulated environments. You’ll address complex risks in SaaS, customer-managed, and hybrid products, translating security and compliance needs into practical designs, automation, and verified safeguards. The role is remote and hands-on, with influence across engineering and product teams.

Responsibilities - Lead security reviews for distributed, multi-tenant and customer-managed products, including design reviews, threat modeling, abuse analysis, code review, and test planning. - Define secure architecture and operating patterns for identity, network exposure, encryption, secrets, logging, containers, infrastructure as code, and data isolation. - Turn regulatory requirements into sustainable technical controls and evidence; support authorization boundaries, continuous monitoring, vulnerability and change management, and assessor reviews. - Investigate security findings, assess exposure and impact, coordinate fixes, validate remediation, and look for related weaknesses. - Build scalable vulnerability management and developer security capabilities, including automated guardrails across code, dependencies, infrastructure, containers, and cloud environments. - Advise and mentor engineers and security partners, and oversee external testing so findings are assigned and verified.

Requirements - Extensive hands-on experience in product, application, and cloud security, including vulnerability analysis and remediation. - Ability to guide security across complex SaaS, customer-managed, or hybrid products and influence multiple teams. - Strong written and verbal communication skills, including the ability to explain risk and tradeoffs to technical and nontechnical audiences. - Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent practical experience.

Nice to have - Experience with enterprise data platforms, observability, high-volume pipelines, agents, or hybrid software. - Familiarity with AWS GovCloud, FedRAMP, or NIST SP 800-53. - Experience building developer security platforms, policy-as-code, and automated security controls. - Public security contributions or relevant certifications.

Benefits and work setup Remote work. The source lists health, dental, vision, disability, and life insurance; paid holidays and time off; fertility support; retirement savings; equity; and eligibility for a corporate bonus. The stated base salary range is $265,000–$320,000, dependent on location and qualifications.