Principal Security Engineer

Job Summary

To lead high-impact application security initiatives, the full-time Principal Security Engineer will manage threat modeling and product security reviews, define AI security methodologies, and shape the technical direction of the AppSec program, with the flexibility to work remotely from anywhere in the U.S.

Key responsibilities

• Lead threat modeling and product security reviews, establishing security requirements during the design phase
• Define and drive AI security methodologies across product and engineering, assessing and mitigating AI security risks
• Shape the AppSec program's SDLC controls and influence secure coding standards across teams

Required qualifications

• 10+ years of experience in application security with a focus on product security or AppSec engineering
• Proven ability to own threat modeling as a systematic practice and produce actionable test scenarios
• Hands-on experience securing AI-integrated applications and familiarity with current AI attack classes
• Experience conducting architecture reviews and driving remediation requirements through to implementation
• Fluency in one or more modern programming languages (Python, Java, TypeScript/JavaScript, Go, etc.)