Principal DevSecOps Security Architect

PhysicsX; New York (NY); Hybrid; USD 200,000 - 300,000; Full time

Benefits offered by this job

Equity options

401(k) 5% contribution

Private health insurance

Enhanced parental leave

20 days annual leave

Job summary

PhysicsX, a deep-tech company in New York, is seeking a Principal Security Engineer to partner with engineering teams and embed secure development practices across the CI/CD pipeline. You will lead security reviews, threat modeling, and vulnerability lifecycle management in a fast-paced, high-ownership environment.

You will contribute hands-on expertise in secure coding (OWASP Top 10), SDLC integration, and modern workflows, shaping our security program while collaborating across engineering,

Qualifications

• 10+ years in security with DevSecOps focus.
• Hands-on secure coding, OWASP Top 10, threat modeling, SDLC integration.
• Experience with GitHub/GitLab, CI/CD, IaC, and containerized environments.
• Experience deploying SAST tooling (Semgrep, Snyk).
• Proficiency in Python and Go.
• Strong communication and security risk disclosure能力.

Responsibilities

• Architect and integrate security tooling into CI/CD pipelines to enable shift-left security at scale.
• Lead threat modeling and secure design reviews for web apps, APIs, and cloud services.
• Oversee the end-to-end product vulnerability lifecycle with triage and remediation support.
• Drive secure coding standards, create playbooks, and mentor teams on security practices.
• Design and scale secure development practices across the software lifecycle with cross-functional teams.
• Engage with customers during security reviews.

Skills

DevSecOps

Security design reviews

Secure coding

Threat modeling

SDLC integration

Python

Go

Strong communication

AI security basics

Tools

GitHub/GitLab

CI/CD

IaC

Containerized environments

SAST tooling

Semgrep

Snyk

Job description

PhysicsX, a deep-tech company in New York, is seeking a Principal Security Engineer to partner with engineering teams and embed secure development practices across the CI/CD pipeline. You will lead security reviews, threat modeling, and vulnerability lifecycle management in a fast-paced, high-ownership environment.

You will contribute hands-on expertise in secure coding (OWASP Top 10), SDLC integration, and modern workflows, shaping our security program while collaborating across engineering,