Principal Security Engineer

Pipedrive; Deutschland; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Performance-based bonuses

28 paid leave days

Well-being days

Compassionate leave

Pawternal leave

Job summary

Pipedrive is seeking a Principal Security Engineer to architect security for our SaaS platform and drive agentic automation across security workflows. You will partner with engineering, SRE, and product teams to embed security into Platform, CI/CD pipelines, and IaC, while guiding incident response and strategic security initiatives.

You will lead the design of AI-driven security baselines, defend against AI threats, and mentor teams in secure practices, ensuring data protection and scalable

Qualifications

• 7+ years in security engineering, cloud security, or security architecture in SaaS or cloud-native environments.
• Experience building with AI: developing with LLM APIs, agentic frameworks or utilizing AI-assisted coding tools to automate engineering workflows
• Deep technical proficiency in cloud security, modern IAM, and network security
• Expertise in Secure SDLC & DevSecOps: strong understanding of building security into automated deployment pipelines and infrastructure
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences

Responsibilities

• Engineer and architect scalable security solutions for cloud-native environments to protect customer data, applications, and networks
• Develop autonomous security agents and workflows using LLMs and agentic frameworks to automate complex tasks such as event monitoring and triage, threat modeling, vulnerability discovery and remediation
• Design and build automated IAM, data encryption, and threat detection capabilities that function without manual intervention
• Create baselines and security controls for AI-driven products, ensuring data model integrity and safety of training pipelines
• Build defenses against AI-specific threats within customer-facing and internal AI initiatives
• Lead incident response and provide expert analysis for internal investigations
• Partner with Engineering and SRE teams to embed security into Platform, CI/CD pipelines, and IaC
• Provide technical mentorship to security and engineering teams while aligning with enterprise security strategy
• Ensure all engineered solutions align with enterprise security strategy

Skills

Security engineering

Cloud security

IAM

Threat detection

DevSecOps

LLM APIs

Tools

CI/CD pipelines

Agentic frameworks

IaC

Job description

We’re looking for a Principal Security Engineer to join Pipedrive as a technical builder responsible for engineering the security architecture of our SaaS platform, corporate operations, and the tools and methods the security team will use. This high‑level engineering role focuses on building systems that automate security at scale and address associated threats. The role also partners across the business to act as an advisor to technical and business stakeholders.

Security Engineering & Agentic Automation

• Engineer and architect scalable security solutions for cloud‑native environments to protect customer data, applications, and networks
• Develop autonomous security agents and workflows using LLMs and agentic frameworks to automate complex tasks such as event monitoring and triage, threat modeling, vulnerability discovery and remediation
• Design and build automated identity and access management (IAM), data encryption, and threat detection capabilities that function without manual intervention

AI Security Architecture & Integrity

• Create technical baselines and security controls for AI‑driven products, ensuring data model integrity and the security of training pipelines
• Build defenses against emerging AI‑specific threats, such as prompt injection, model inversion, and data leakage, within both customer‑facing and internal AI initiatives
• Conduct deep‑dive technical reviews of AI architectures to ensure security is embedded into the foundation of every new model and automation project

Technical Leadership & Collaboration

• Lead the response effort during active security incidents and provide expert analysis when called upon for internal investigations
• Partner with Engineering and SRE teams to engineer security directly into our Platform, CI/CD pipelines, and Infrastructure‑as‑Code (IaC)
• Provide technical mentorship to security and engineering teams, fostering a culture where security is viewed as an engineering challenge to be solved with code
• Ensure that all engineered solutions align with the broader enterprise security strategy

Does this sound like you?

• 7+ years of experience in security engineering, cloud security, or security architecture in a SaaS or cloud‑native environment
• Demonstrated ability building with AI: developing with LLM APIs, agentic frameworks or utilizing AI‑assisted coding tools to automate engineering workflows
• Deep technical proficiency in cloud security, modern IAM, and network security
• Expertise in Secure SDLC & DevSecOps: Strong understanding of building security into automated deployment pipelines and infrastructure
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non‑technical audiences

Why Pipedrive?

• People‑first culture – Be part of a team that values authenticity, champions collaboration, and supports each other‑no egos, just teamwork. Work alongside top talent from around the world in an inclusive space where different perspectives fuel our best ideas. Everyone is welcome
• Unlock potential – Push boundaries, take ownership, and experiment with the latest technologies as we enhance our AI First Vision. We empower bold ideas that drive real change
• We’ve got you – Your well‑being matters. Enjoy flexible hours, wellness perks and SWAG. Think performance‑based bonuses, 28 paid leave days, well‑being days, compassionate leave, and even pawternal leave‑because we take care of ourselves and our people
• Grow with us – Whether through mentorship, coaching, or internal mobility, we invest in helping you unlock your potential. Open, honest feedback and clear communication are at our core. We grow together through trust and accountability
• Packed with purpose – Help 100,000+ small and medium‑sized businesses grow and succeed while doing meaningful, customer‑driven work

Diversity & Inclusion:

Pipedrive is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. We welcome applications regardless of race, color, religion, age, gender, sexual orientation, gender identity or expression, national origin, disability, veteran status, marital or family status, or any other characteristic protected by applicable law.

Eligibility:

For this position, we consider only candidates who possess the legal right to work in Germany without the need for visa sponsorship or relocation assistance and are located within a commutable distance to our Pipedrive Berlin office.

Background Checks:

Where permitted by local law and necessitated by the scope of the role (e.g., access to sensitive data), Pipedrive may conduct a pre‑employment background check. This will be handled in strict accordance with our Candidates Privacy Notice.