Principal Product Security Engineer (AI, Cloud, DevSecOps)

Stellarus; California; Sur place; USD 149 000 - 223 000; Plein temps

Résumé du poste

Stellarus is seeking a Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure environments. The role emphasizes secure-by-default automation, developer-native platforms, and securing AI-enabled systems.

You will help scale security engineering, detection, and response capabilities while translating regulatory requirements into automated controls.

Qualifications

• Requires college degree or equivalent experience.
• Requires a minimum of at least 10 years of relevant experience.
• 8+ years in DevSecOps, Security Engineering, or Software Engineering preferred.
• Strong experience building security capabilities into CI/CD pipelines.
• Hands‑on experience with Infrastructure-as-Code tools such as Terraform.
• Proficiency in Python, Go, or TypeScript.
• Deep understanding of application security, cloud security, and distributed systems.
• Experience securing Kubernetes or cloud‑native environments.
• Strong understanding of IAM, encryption, and network security principles.
• Experience with policy‑as‑code tools such as OPA or Kyverno.
• Experience with AI/ML systems or applying AI to security problems preferred.
• Experience in regulated environments such as healthcare preferred.

Responsabilités

• Design and operate security controls embedded in CI/CD pipelines using policy-as-code and automation-first approaches.
• Build and maintain developer-native security platforms covering SAST, SCA, API validation, and IaC security.
• Implement data protection controls to detect and prevent exposure of sensitive data including PHI, PII, and secrets.
• Develop secure application and API patterns including authentication, authorization, and encryption standards.
• Engineer reusable libraries for encryption, tokenization, and data redaction.
• Define and enforce cloud and infrastructure security using Infrastructure-as-Code and GitOps workflows.
• Build identity, access, encryption, and network guardrails using automated controls.
• Implement software supply chain security including SBOM generation, artifact signing, and provenance validation.
• Develop detection-as-code and automated response capabilities to reduce reliance on manual security operations.
• Design and enforce controls to secure AI systems and prevent misuse, data leakage, and model risk.
• Leverage AI to improve detection, analysis, and automation across security operations.
• Translate regulatory requirements into enforceable technical controls and automated evidence generation.
• Eliminate manual security processes in favor of scalable engineering-driven solutions.

Connaissances

DevSecOps

Security Engineering

CI/CD security

Terraform

Python

Go

TypeScript

Kubernetes

Cloud security

IAM

Policy-as-code

AI in security

Formation

College degree or equivalent

Outils

OPA

Kyverno

Description du poste

Stellarus is seeking a Product Security Engineer to design, build, and operate security as code across application, data, cloud, and infrastructure environments. The role emphasizes secure-by-default automation, developer-native platforms, and securing AI-enabled systems.

You will help scale security engineering, detection, and response capabilities while translating regulatory requirements into automated controls.