Principal Security Engineer

Ascensus; Florida; Ibrido; USD 130.000 - 160.000; Tempo pieno

Descrizione del lavoro

Ascensus is seeking a Principal Security Engineer to design, implement, and enhance security solutions across the enterprise. You will shape security strategy, lead major initiatives, and align technologies with business objectives and compliance requirements.

Role requires deep technical expertise, problem-solving, and the ability to mentor junior engineers. You will collaborate with SOC, threat intel, architecture, and IT teams to drive security resilience and innovation across the

Competenze

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 7+ years of experience in security engineering, cybersecurity operations, or security architecture roles.
• Strong expertise in NGFW, WAF, PAM (CyberArk), EDR, IDS/IPS, DLP, SSO/MFA, SIEM, CASB/SWG/SASE.

Mansioni

• Security Architecture & Implementation: Design, implement, and optimize security solutions to protect enterprise assets, data, and systems.
• Technology Guidance: Provide technical guidance in evaluating, selecting, and deploying security tools and frameworks.
• Security Engineering & Automation: Develop and implement security automation and integration across security platforms using scripting languages (Python, PowerShell, Bash).
• Threat & Vulnerability Management: Work closely with the SOC and threat teams to identify, analyze, and remediate security risks.
• Compliance & Governance: Ensure security solutions align with regulatory requirements.
• Incident Response Support: Provide advanced security engineering support for security incidents and investigations, including root cause analysis and remediation strategies.
• Security Program Ownership: Lead and contribute to large‑scale security projects and initiatives, ensuring proper documentation, risk assessments, and successful implementation.
• Research & Development: Stay ahead of emerging threats, security technologies, and industry trends to continuously enhance security posture.
• Mentorship & Training: Mentor security engineers and provide knowledge sharing through documentation, training sessions, and hands‑on guidance.

Conoscenze

NGFW

WAF

PAM

EDR

IDS/IPS

DLP

SSO

MFA

SIEM

CASB

SWG

SASE

IAM

Zero Trust

Networking

Cloud security

Python

PowerShell

Bash

Security architecture

Threat modeling

CyberArk

F5

Formazione

Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field

Strumenti

CyberArk

F5

Descrizione del lavoro

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.

Section 1: Position Summary

As a Principal Security Engineer, you will be a key visionary within the security engineering team, responsible for designing, implementing, and enhancing security solutions across the enterprise.

You will play a crucial role in shaping security strategy, leading major security initiatives, and ensuring that security technologies and processes align with business objectives, industry standards, and compliance requirements.

This role requires deep technical expertise, strategic thinking, problem‑solving skills, and the ability to mentor junior engineers. You will collaborate with security teams (SOC, threat intelligence, architecture) and IT teams to drive security innovation and resilience across the organization.

Section 2: Job Functions, Essential Duties and Responsibilities

• Security Architecture & Implementation: Design, implement, and optimize security solutions to protect enterprise assets, data, and systems.
• Technology Guidance: Provide technical guidance in evaluating, selecting, and deploying security tools and frameworks.
• Security Engineering & Automation: Develop and implement security automation and integration across security platforms using scripting languages (Python, PowerShell, Bash).
• Threat & Vulnerability Management: Work closely with the SOC and threat teams to identify, analyze, and remediate security risks.
• Compliance & Governance: Ensure security solutions align with regulatory requirements.
• Incident Response Support: Provide advanced security engineering support for security incidents and investigations, including root cause analysis and remediation strategies.
• Security Program Ownership: Lead and contribute to large‑scale security projects and initiatives, ensuring proper documentation, risk assessments, and successful implementation.
• Research & Development: Stay ahead of emerging threats, security technologies, and industry trends to continuously enhance security posture.
• Mentorship & Training: Mentor security engineers and provide knowledge sharing through documentation, training sessions, and hands‑on guidance.

Section 3: Experience, Skills, Knowledge Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 7+ years of experience in security engineering, cybersecurity operations, or security architecture roles.
• Strong expertise in security technologies, including:

o Next Generation Firewalls (NGFW)

o Web Application Firewall (WAF) must have F5 experience

o Privileged Access Management (PAM) must have CyberArk experience

o Endpoint Detection & Response (EDR)

o Intrusion Detection/Prevention Systems (IDS/IPS)

o Data Loss Prevention (DLP)

o Single Sign-On (SSO) & Multi-Factor Authentication (MFA)

o Security Information & Event Management (SIEM)

o Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Secure

Access Service Edge (SASE)

o Identity & Access Management (IAM)

o Network segmentation & Zero Trust architectures

• Deep knowledge of Networking, NGFW, WAF, macro segmentation, cloud security (AWS, Azure, GCP) and modern security frameworks (e.g., Zero Trust, MITRE ATT&CK, NIST CSF, ISO 27001).
• Proven experience with automation and scripting (Python, PowerShell, Bash) for security engineering and threat detection.
• Strong experience in security architecture and solution design for enterprise environments.
• Experience with performing risk assessments, threat modeling, and security controls validation.
• Advanced knowledge of compliance.
• Excellent problem‑solving, analytical thinking, and communication skills, with the ability to translate security concepts for non‑technical stakeholders.
• Professional security certifications preferred: CISSP, OSCP, CISM, CEH, GSEC, or equivalent.

For virtual remote positions, we require an uninterrupted workspace during business hours and an internet work speed of 25 Mbps or better. If you are unsure of your internet speed before applying, please check with your service provider.

The national average salary range for this role is130-160k in base pay, exclusive of any bonuses and benefits.This base salary range represents the low and high end of the salary range for this position. Actual salary offered will vary and may be above or below the range based on various factors including but not limited to location, experience, performance, and internal pay alignment. We do not anticipate that candidates hired will begin at the top of the range however, from time to time, it may occur on a case‑case basis. Other rewards and benefits may include: 401(k) match, Medical, Dental, Vision, Paid‑Time‑Off, etc. For more information, please visit careers.ascensus.com/#Benefits

Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.