Principal Security Engineer

cars; United States; Remote; USD 176,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, vision coverage from–

401(k) with immediate vesting

Stock purchase plan

Flexible time off

Paid holidays and leave

Home office stipend

Tuition reimbursement

Job summary

cars is seeking a Principal Security Engineer in the United States to lead security across cloud, applications, and delivery systems. Reporting to the CISO, this hands-on yet strategic role combines engineering with executive guidance and mentoring for security operations teams.

You will architect controls, drive secure development across CI/CD, and lead threat monitoring and incident response while advising leadership on priorities and risk mitigation.

Qualifications

• 10+ years information security experience, in a senior/principal role
• Strong knowledge of firewalls, IDS/IPS, encryption and IAM
• Experience with cloud platforms, containers, DevOps, and IaC tooling
• Ability to script in Python, PowerShell, or Bash for security across Agile/DevOps
• Familiarity with PCI DSS, SOC 2, ISO 27001, and secure development practices (OWASP)
• Strong communication, collaboration, and problem-solving skills

Responsibilities

• Architect and maintain security controls for IT and product cloud environments, infrastructure, applications and containers.
• Collaborate with product, engineering, and operations to bake security into CI/CD pipelines and IaC workflows.
• Lead threat monitoring, incident response, and efforts to reduce recurrence.
• Conduct security assessments, code reviews, and penetration testing; automate testing and compliance checks.
• Develop security policies and advise leaders on priorities, resources, and mitigations.
• Mentor security operations engineers and stay ahead of vulnerabilities and threats.

Skills

Security engineering

Cloud security

DevOps & IaC

Scripting (Python/PowerShell/Bash)

Threat monitoring

Security compliance (PCI DSS, SOC 2, &

Education

Bachelor's degree or equivalent

Tools

Cloudflare

CrowdStrike

Proofpoint

CyberArk

Burp Suite

AWS Security Hub

GuardDuty

Inspector

JumpCloud

Snyk

Job description

Role overview

Design and guide security across cloud infrastructure, applications, and delivery systems, helping protect critical data and services as the organization evolves. Reporting to the CISO, this principal-level role combines hands-on security engineering with strategic advice to executives and cross-functional teams, and includes mentoring security operations engineers.

Responsibilities

• Architect and maintain security controls for IT and product cloud environments, infrastructure, applications, and containers.
• Work with product, engineering, and operations teams to build security into development workflows, CI/CD pipelines, and infrastructure as code.
• Lead threat monitoring, incident response, and efforts to reduce the chance of recurrence.
• Conduct security assessments, code reviews, and penetration testing; automate testing and compliance checks.
• Develop security policies and procedures, and advise leaders on priorities, resources, and mitigation strategies.
• Mentor security operations engineers and track emerging threats, vulnerabilities, and practices.

Requirements

• At least 10 years of information security experience, including success in a comparable role.
• Strong understanding of security controls such as firewalls, intrusion detection and prevention, encryption, and identity and access management.
• Experience with DevOps, cloud platforms, containers, and infrastructure-as-code tools.
• Ability to script in Python, PowerShell, or Bash and apply security across Agile and DevOps delivery.
• Familiarity with PCI DSS, SOC 2, ISO 27001, and secure development practices such as OWASP.
• Strong communication, collaboration, and problem-solving skills.

Nice to have

• A relevant bachelor's degree or equivalent experience, plus certifications such as CISSP, CISM, or AWS Certified Security Specialty.
• Experience with tools including Cloudflare, CrowdStrike, Proofpoint, CyberArk, Burp Suite, AWS Security Hub, GuardDuty, Inspector, JumpCloud, or Snyk; security budget development is also valued.

Benefits and work setup

• U.S. base salary range: $175,800–$219,750, depending on skills and experience.
• Benefits include medical, dental, and vision coverage from day one, a matched 401(k) with immediate vesting, stock purchase plan, flexible time off, paid holidays and leave, a home office stipend, and tuition reimbursement.
• Applicants must already be authorized to work in the United States; visa sponsorship is unavailable.