Principal Infrastructure Security Engineer

Role overview

Set the direction for infrastructure security while remaining closely involved in implementation. This principal-level, player-coach role strengthens security across a primarily AWS-based environment and software delivery lifecycle, partnering with application and information security teams to prevent problems and respond effectively when incidents occur.

Responsibilities

- Build and execute a risk-based DevSecOps roadmap, with clear ownership, metrics, escalation paths, and plans for team growth. - Implement AWS safeguards for identity and access, networking, encryption, secrets, and cloud configuration; ensure useful security activity is logged. - Integrate security controls into infrastructure as code, CI/CD, containers, and software supply chains, including scanning and policy automation. - Coordinate with application and information security on testing, policy, audit evidence, and incident response. - Prioritize vulnerabilities by exposure, exploitability, and business impact; drive remediation and manage exceptions. - Investigate incidents, support containment and recovery, and turn lessons learned into improvements.

Requirements

- At least 10 years of combined software, platform/DevOps, and security engineering experience, including three or more years as a technical lead. - Demonstrated ability to lead cross-functional security or infrastructure initiatives and influence engineering and security teams. - Hands-on AWS security and IAM experience, including least privilege, privileged access, encryption, and network boundaries. - Experience automating security controls through scripting, infrastructure as code, CI/CD, and policy as code. - Experience securing delivery pipelines across code, infrastructure, containers, dependencies, artifacts, and secrets. - Strong vulnerability management and incident response experience, including communicating risk and tradeoffs to leadership.

Nice to have

- Experience building a security or DevSecOps practice and developing or managing engineers. - Kubernetes and container security, secure software development, supply chain security, or security monitoring experience. - Experience selecting tools, managing vendors or budgets, and measuring security outcomes. - Familiarity with audit frameworks such as SOX, SOC 2, or ISO 27001.

Benefits and work setup

- Listed salary range is $220,000–$240,000, depending on location and experience. - Benefits include flexible paid time off, medical, dental, and vision coverage, equity, discounts, wellness classes, and pet insurance.