Cyber Security Principal

This position is hybrid in Memphis, TN / Plano, TX / Pittsburgh, PA. Candidates must live within a commutable distance from one of these locations to be eligible. Employees will be required to work at a FedEx office location up to several times per week.

About the Role

As a Cyber Security Principal, you are a security leader and force multiplier embedded within our development organization. You will operate with a high degree of autonomy to solve complex and ambiguous security problems, shifting from finding individual bugs to building systems that prevent them entirely. You will mentor other engineers, drive security initiatives across teams, and be a recognized expert for product security, influencing the architecture and practices of the entire portfolio.

Responsibilities

• Drive the security strategy for your product area. Identify and solve broad, systemic security issues.
• Define and lead multi-team security initiatives from concept to completion.
• Lead and facilitate threat modeling for large-scale, complex systems. Teach and empower development teams to conduct effective threat modeling on their own and scale the practice.
• Review system architecture and design for security flaws, going beyond common vulnerabilities to identify subtle and complex issues. Propose and advocate for new secure design patterns and architectural standards.
• Design, build, and implement the security automation strategy for your portfolio. Integrate new classes of security tools, build custom automation to address unique challenges, and improve the signal-to-noise ratio of security feedback for developers.
• Actively mentor product security and development engineers on security best practices, design, and architecture. Your guidance should measurably improve the security capabilities of the teams you work with.
• Act as a security subject matter expert and thought leader. Influence team-wide and cross-functional technical and architectural decisions to ensure security is a foundational component.

Requirements

• Bachelor's degree or equivalent in computer science, information systems, and/or equivalent formal training.
• Five (5+) years of experience in IT information security.
• Skills include IT security and infrastructure.
• Strong technical and consulting skills, project management capability.
• Experience with security and risk frameworks, standards, and best practices.
• Strong communication skills.

Preferred Skills & Qualifications

• 3-5+ years in a dedicated application, product, or offensive security leadership role.
• Expert-level proficiency in one or more programming languages (e.g., Python, Java, Go, C#).
• Deep, practical expertise in secure architecture, threat modeling, and building security automation.
• A proven track record of leading complex, cross-functional security projects and initiatives.
• Experience designing and implementing security controls in a complex, multi-cloud environment (AWS, Azure, GCP).
• Published security research, conference talks, or open-source tool contributions.
• Advanced security certifications (e.g., OSCP, OSWE, GWAPT, CISSP).
• Experience in defining and scaling security programs (e.g., bug bounty, security champions).

Pay

US pay range: $9,208.38 - $16,575.08 monthly

Benefits

• Health, vision, and dental insurance
• Retirement plans
• Tuition reimbursement