Principal Product Security Engineer: AI & Cloud Security Leader

ContentBuffer; United States; Remote; USD 265,000 - 320,000; Full time

Job summary

Cribl seeks a Principal Product Security Engineer to be a hands-on authority at the intersection of application, cloud, and FedRAMP security. You will secure Cribl’s cloud-native products processing high‑volume data across large enterprises.

You will set long‑term security direction, mentor teams, and translate risk into durable, secure designs and automated patterns. This remote role emphasizes risk reduction with measurable outcomes.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• Hands-on AWS/Azure security experience in production SaaS.
• Familiarity with FedRAMP and NIST SP 800-53 controls.

Responsibilities

• Set long‑term product and cloud security direction across teams and roadmaps.
• Lead security reviews for distributed SaaS and customer‑managed products, including threat modeling.
• Translate risk into engineering requirements, mitigations, tests, and secure defaults.
• Serve as cloud security authority across IAM, KMS, encryption, secrets, logging, containers, and IaC.
• Lead FedRAMP engineering, including control mapping, monitoring, and incident response coordination.
• Investigate vulnerabilities from bug bounty, tests, detections; verify fixes and drive remediation.

Skills

Security architecture

Threat modeling

FedRAMP

NIST SP 800-53

AWS security

Azure security

Cloud security

Vulnerability management

CI/CD security

SAST SCA

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

JavaScript

TypeScript

Python

Go

Job description

Cribl seeks a Principal Product Security Engineer to be a hands-on authority at the intersection of application, cloud, and FedRAMP security. You will secure Cribl’s cloud-native products processing high‑volume data across large enterprises.

You will set long‑term security direction, mentor teams, and translate risk into durable, secure designs and automated patterns. This remote role emphasizes risk reduction with measurable outcomes.