Principal Security Engineer

Tixy; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Tixy is seeking a Principal Security Engineer to lead security architecture and operations for enterprise systems, cloud environments, products, networks, and data. The role reports to the Chief Security Officer and requires strong leadership and hands-on security engineering expertise.

The ideal candidate will drive secure design, threat modeling, and collaboration with engineering, IT, product, and business teams to strengthen cyber-resilience and implement Zero Trust practices.

Qualifications

• Bachelor's degree or higher in a related field is required.
• 8–10+ years in cybersecurity/security engineering with senior experience.
• Strong hands-on design and implementation of enterprise security architectures.

Responsibilities

• Design and implement enterprise security architecture across systems and cloud.
• Strengthen security operations, cyber-resilience, and risk management.
• Partner with engineering, IT, product and business teams to drive secure development.

Skills

Enterprise Security Architecture

Security Engineering

Security Operations

Cyber Resiliency

Network Security

IAM / PAM / SSO / MFA

Zero Trust

Incident Response

DevSecOps in SDLC

Secure Software Development

Education

Bachelor's degree in Computer Science, Engineering or related field

Tools

SIEM/SOAR/XDR platforms

CNAPP

CASB

DLP

EDR

Vulnerability management tools

CI/CD security tools

Job description

Work Arrangement: Fully On-Site - 5 Days a Week

Reports To: Chief Security Officer (CSO)

Employment Type: Full-Time

About the Role

We are seeking an experienced Principal Security Engineer to join our security organization and help protect enterprise systems, cloud environments, products, networks, data, and connected devices. This is a senior technical leadership role reporting directly to the Chief Security Officer.

The Principal Security Engineer will be responsible for designing and implementing enterprise security architecture, strengthening our security operations and cyber-resilience capabilities, managing security risks, and partnering closely with engineering, IT, product, and business teams.

The ideal candidate brings deep hands-on security engineering expertise combined with strong architectural, leadership, communication, and problem-solving skills.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related technical field.
• 8-10+ years of professional experience in cybersecurity/security engineering, with at least 3 years in a senior, staff, principal, or security architecture role.
• Strong experience designing and implementing enterprise security architectures.
• Hands-on experience with modern security operations and security engineering technologies.
• Strong knowledge of security frameworks such as NIST and ISO 27001.
• Experience with enterprise network security, firewalls, IDS/IPS, encryption, and secure network architecture.
• Strong understanding of IAM, RBAC, SSO, MFA, identity governance, and least-privilege principles.
• Experience securing AWS and/or Azure cloud environments.
• Strong understanding of Zero Trust architecture and implementation.
• Experience with incident response, threat intelligence, vulnerability management, and cyber-resiliency.
• Experience with DevSecOps and integrating security into software development and CI/CD processes.
• Experience with product security and secure software development practices.
• Understanding of IoT security principles and connected-device security.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written, verbal, communication, and technical leadership skills.

Preferred Qualifications

• Experience working in a SOC, Security Operations, or Threat Detection environment.
• Experience with enterprise-scale SIEM/SOAR/XDR platforms.
• Experience with CNAPP, CASB, DLP, EDR, vulnerability management, and automated security testing platforms.
• Experience developing security automation and response workflows.
• Experience with threat modeling and security architecture reviews.
• Relevant professional certifications such as CISSP, CCSP, CISM, GIAC, OSCP, or cloud security certifications are a plus.
• Experience working in highly regulated or security-sensitive enterprise environments.
• Experience leading security initiatives across multiple technology and business teams.

Core Competencies

• Enterprise Security Architecture
• Security Engineering
• Security Operations / SOC
• Cyber Resiliency
• Network Security
• IAM / PAMPrincipal Security Engineer

Location

San Jose, CA