Lead Product Security Engineer, Cloud & FedRAMP (Remote)

Cribl; United States; Remote; USD 265,000 - 320,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl seeks a Principal Product Security Engineer to serve as a hands‑on technical authority at the intersection of application, cloud, and FedRAMP security. You will help secure Cribl’s cloud‑native, customer‑managed, and hybrid products as they process high‑volume data for some of the world’s largest organizations.

As a Principal engineer, you will set long‑term direction, mentor engineers, and coordinate security across Engineering, SRE, Cloud Operations, Compliance, and PSIRT partners to

Qualifications

• Typically 10+ years of relevant software security, security engineering, or software engineering experience, including hands‑on Application Security or Product Security.
• Experience securing AI or agentic systems and applying AI responsibly to security engineering workflows.
• Bachelor’s degree in computer science, cybersecurity, or a related field—or equivalent practical experience.

Responsibilities

• Set long‑term product and cloud security direction across multiple teams, shaping roadmaps, standards, secure‑by‑default patterns, and risk‑informed design and release decisions.
• Lead Product Security Reviews for distributed, multi‑tenant SaaS and customer‑managed products, including architecture and design review, threat modeling, abuse‑case analysis, targeted secure code review, and security test planning.
• Translate risk into concrete engineering requirements, mitigations, tests, and secure defaults; stay engaged through implementation and independently verify that the intended risk reduction was achieved.
• Serve as a principal cloud security authority across IAM and workload identity, organization and account boundaries, network exposure, KMS and encryption, secrets, logging and detection, containers and Kubernetes, serverless services, infrastructure as code, hardening, and data isolation.
• Lead the Product Security component of FedRAMP engineering. Translate FedRAMP Moderate and NIST SP 800‑53 control intent into sustainable technical controls and defensible evidence, and partner on authorization‑boundary and significant‑change decisions, continuous monitoring, vulnerability and change management, POA&M and deviation remediation, incident response, vendor assessments, and 3PAO or assessor interactions.
• Investigate ambiguous signals and vulnerabilities from bug bounty, application and supply‑chain scanners, penetration tests, cloud detections, and internal reports; determine exploitability, exposure, and impact; coordinate remediation; validate fixes and bypasses; and hunt for variants and root causes.

Skills

Security engineering

Application security

Cloud security

FedRAMP/NIST

Threat modeling

Education

Bachelor's degree in CS/Cybersecurity

Tools

AWS

Azure

KMS encryption

Job description

Cribl seeks a Principal Product Security Engineer to serve as a hands‑on technical authority at the intersection of application, cloud, and FedRAMP security. You will help secure Cribl’s cloud‑native, customer‑managed, and hybrid products as they process high‑volume data for some of the world’s largest organizations.

As a Principal engineer, you will set long‑term direction, mentor engineers, and coordinate security across Engineering, SRE, Cloud Operations, Compliance, and PSIRT partners to