Principal Security Engineer

League; United States; On-site; USD 158,000 - 202,000; Full time

Job summary

League is seeking a Principal Security Engineer to lead security architecture in an AI-native engineering environment, partnering with Product Security and Security Operations to shape secure-by-design systems.

You will mentor teams, drive encryption/IAM/cloud and core infrastructure controls, steer complex AI integrations, and translate risk into business terms for leadership and compliance partners.

Qualifications

• 8+ years in security engineering with depth in at least two areas
• Experience securing AI-integrated systems including LLM apps or agent integrations
• Experience in regulated environments (HIPAA, HITRUST, SOC 2, PIPEDA) translates into engineering practice
• Collaborative experience across product/security/operations organizations
• Able to influence across peer functions and align to security objectives

Responsibilities

• Design and implement security architecture and controls across encryption/key management, IAM, and core infrastructure
• Set technical direction for complex and novel systems, including AI/agentic architectures and integrations
• Partner with engineering and product teams on secure-by-default design and embedded security
• Provide technical mentorship to Security Software Engineering, Product Security, and Security Operations
• Serve as senior escalation point and design advisor on complex technical questions
• Guide security automation initiatives with Security Software Engineering
• Translate technical risk into business terms for leadership, customers, and compliance stakeholders

Job description

About League

League is one of the fastest-growing technology companies in Canada and the leading healthcare experience platform. Getting healthcare is often the easy part - finishing it is where things fall apart: people book the appointment and skip the follow-up, fill the prescription and stop taking it, get the referral and never make the call. That gap costs health plans and health systems money, and it costs people their health. League closes that gap - identifying what each person needs to do next, clearing what's in their way, and getting it done, for the 70 million+ people whose care already runs through our platform. Health plans and health systems trust us to do this at scale. Organizations like Manulife, SCAN, Geisinger, and Medibank on the payer side, and Baptist and Shoppers Drug Mart on the provider side.

Position Summary:

League is looking for a Principal Security Engineer to serve as the senior technical leader within our Security Engineering organization. This role entails designing and driving security architecture across a rapidly AI-native engineering environment, in close partnership with Product Security and Security Operations.

Product Security owns day-to-day security reviews and vulnerability management; Security Operations owns detection and response. This role sets technical direction and design for the organization's most complex and novel systems, including AI/agentic architectures, and serves as the connective tissue that makes the broader security function more effective.

The right person for this role doesn't wait for a ticket. They show up in design conversations, ask the right question at the right moment, and leave engineering and security colleagues alike more capable than they found them - all while being a strategic cross-functional partner that people enjoy collaborating with.

What you'll be doing:

• Design and implement security architecture and controls across encryption/key management, IAM, and core infrastructure
• Set technical direction and design for the organization's most complex and novel systems - including AI/agentic architectures, major platform changes, and novel integrations
• Partner proactively with engineering and product teams on secure-by-default design, embedding security capability directly into their workflows
• Provide technical mentorship to Security Software Engineering and to individuals within Product Security and Security Operations, raising technical capability across the broader security function
• Serve as senior technical escalation point and design advisor to Product Security and Security Operations on complex technical questions, without owning execution of their programs
• Set direction and design for security automation initiatives, partnering with Security Software Engineering, who owns implementation and build
• Translate technical risk into business terms for leadership, customers, and compliance stakeholders

What you'll bring to the team:

• 8+ years in security engineering, with demonstrated depth in at least two of: encryption/key management, IAM, cloud security architecture, application security
• Direct, hands-on experience securing AI-integrated systems including LLM applications, coding agents, or MCP-style tool integrations; not just familiarity with the concepts
• Experience operating in a regulated environment (HIPAA, HITRUST, SOC 2, PIPEDA, or equivalent), including translating compliance requirements into engineering practice
• Experience collaborating within a broader security organization (partnering with product/application security and security operations functions) rather than as a sole practitioner owning every function end-to-end
• Able to strategically influence across peer functions and ensure alignment to overall Security objectives
• Track record of influencing engineering decisions and behaviour without formal authority over the teams involved

CANADA APPLICANTS ONLY:

The Canada-specific compensation range below for this full-time position is exclusive of bonus, equity and benefits. This range reflects the minimum and maximum target for base salaries for the position across all Canadian locations. The salary range is intentional to account for the performance and career progressions a Leaguer will experience in the role throughout their time at League. Where in the band you may land is determined by job-related skills/experience. Your recruiter can share more about the specific salary range specific to your skills and experience during the hiring process.

Compensation range for Canada applicants only

$220,000-$280,000 CAD

AI Fluency & Ways of Working

At League, we are an AI-native organization . We expect all employees regardless of role or level to thoughtfully leverage AI to improve the quality, speed, and impact of their work.

What this means in practice:

• Use AI tools as part of your daily workflow to enhance productivity, problem-solvi