Principal Security Engineer

What you’ll do

• Conduct security assessments of products and services, analyze potential vulnerabilities, and recommend mitigation strategies.
• Develop advanced testing tools and methodologies to proactively identify and address security weaknesses.
• Perform in-depth security design and coding, including code reviews and complex investigation support, while providing advanced guidance to improve solutions.
• Review security alerts and use expertise to recognize and escalate complex security violations for timely response and resolution.
• Contain and mitigate security events by coordinating with relevant teams and stakeholders.
• Contribute to post-event reviews by providing insights and recommendations to strengthen event response processes.
• Support compliance by contributing to compliance assessments, reviewing security compliance deliverables, and ensuring internal and external obligations are met with stakeholder collaboration.
• Keep inventory systems maintained and compliant from a security perspective.
• Provide guidance on business continuity and disaster recovery plans by considering potential risks and vulnerabilities, and support execution of continuity plans to protect critical systems and data during disruptions.
• Assess readiness for certification and/or audits and provide recommendations to improve preparedness.
• Apply data security and privacy best practices, including independent use of encryption, hashing, masking, and access management to protect confidentiality and integrity.
• Review documentation and procedures related to data security, identify gaps, and recommend improvements to enhance security posture.
• Stay current on emerging trends and evolving threats, evaluate novel techniques and technologies, and engage in research and collaboration to support innovative security solutions.

How you’ll work

• Manage and coordinate moderately complex tasks by monitoring timelines and deliverables for a moderately sized project or initiative.
• Delegate, monitor, and prioritize across multiple projects, providing technical oversight and adjusting plans as resources or timelines shift.
• Collaborate across the organization to align on expectations and achieve shared objectives, including leveraging understanding of business leaders, stakeholders, and/or customers to ensure solutions meet real needs.
• Support inclusivity by actively seeking and listening to diverse perspectives and ensuring others feel heard and respected.
• Address moderately complex issues by analyzing a wide range of data and information using standard practices.
• Proactively escalate unresolved or critical issues with thorough assessment and potential solutions, and review, contribute to, and document problem-solving strategies.
• Seek ongoing feedback and training, stay abreast of industry trends and best practices, and coach and mentor junior team members to promote knowledge sharing.
• Recommend and help implement process improvements across teams, soliciting feedback on alternative approaches and evaluating impacts for stakeholders.
• Contribute to talent development by participating in candidate interviews, assessing candidates, and providing hiring recommendations.

Security techniques you’ll use

Encryption, hashing, masking, access management