Principal Security Engineer
Enterprise-selling platform, SOC 2 Type II certified, with a current security team of six.
About the role
Lead application and infrastructure security across a multi-tenant SaaS. This principal-level role involves threat modeling, secure design review, and alignment with a mature security team of six. Responsibilities span product security, cloud controls (Go, OPA, Kubernetes, Terraform, AWS), and collaboration with GRC on SOC 2 and customer security inquiries. The position focuses on setting direction and strategy, not just executing tasks.
What makes this opportunity stand out
- Clear path to Director of Security within 18 months
- H-1B and green-card sponsorship (EB-2 / EB-3) with immigration-aware placement from day one
Requirements
- 10+ years in security with deep expertise in application security, cloud security, and at least one major compliance regime (e.g., SOC 2) in a B2B context
- Strong engineering skills: ability to read, review, and challenge code, infrastructure-as-code (IaC), and service design across the stack
- Proven leadership and influence across engineering and executive teams, unconstrained by organizational size
Logistics
Title: Principal Security Engineer — Principal (Full-time)
Location: Remote (US)
Time zone / hours: US Eastern or Pacific
Primary stack / tools: AWS, Go, Rego/OPA, Kubernetes, Terraform
Pay
Compensation (indicative—confirmed during process): $260k–$310k + equity
The company supports US work authorization, transfers, and sponsorship paths, with exact immigration terms confirmed during the interview process.