ROLES AND RESPONSIBILITIESThe Principal Information Security Engineer is accountable for the following responsibilities, executing and advancing enterprise security controls and secure solutions:
Security Operations- Serve as a technical subject matter expert, guide cross-functional projects, and mentor junior engineers.
- Implement, operate, and continuously improve information security controls in alignment with company policies, frameworks (e.g., NIST, ISO 27001), and regulatory requirements.
- Monitor security tools and logs to detect, investigate, and respond to security events and incidents.
- Stay current on emerging threats, vulnerabilities, and security technologies, and communicate relevant risks to stakeholders.
- Perform Security Assessments: Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software.
- Incident Response Support: Assist in investigating, analyzing, and responding to security incidents related to applications, serves and endpoints, ensuring timely resolution, documentation / post mortem.
Security Architecture & Engineering- Design, build, and deploy enterprise security controls, including firewalls, SIRM, IDS/IPS, Data Loss Prevention (DLP), and Privileged Access Management (PAM).
- Maintain security documentation, including policies, procedures, runbooks, and training materials.
- Strong background in network protocols, firewalls, and endpoint protection tools.
Application Security- Security Foundations: Expert level knowledge on Web Application Security, Cloud Security, and general network/DevSec Ops practices.
- AI & LLM Threat Modeling: identify design flaws, trust boundaries, and attack vectors unique to AI (such as agent autonomy and third-party plugin integrations.
- AI/ML Architecture: Understanding how LLM's. vector databases, and agentic frameworks function.
122,200.00 - 152,750.00 - 183,300.00 USD Annual
