Principal Security Engineer - Enterprise Security & Architecture

Ascensus; Northern (KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Ascensus is seeking a Principal Security Engineer to shape security strategy and lead major initiatives. You will design and implement solutions, mentor engineers, and collaborate with SOC, threat intel, and IT teams to strengthen resilience across the enterprise.

The ideal candidate has 7+ years in security roles, deep expertise in NGFW/WAF/EDR/IDS-IPS/DLP, cloud security, and automation. Remote work options available with strong communication skills.

Qualifications

• Bachelor's or master's degree in CS or InfoSec.
• 7+ years in security engineering, cybersecurity operations, or security architecture.
• Strong knowledge of NGFW, WAF, EDR, IDS/IPS, DLP, SSO/MFA, SIEM, CASB, SWG, SASE, PAM, IAM.
• Experience with cloud security (AWS/Azure/GCP) and Zero Trust.
• Automation and scripting in Python, PowerShell, Bash.
• Strong problem-solving and communication skills.
• Certs preferred: CISSP, OSCP, CISM, CEH, GSEC.

Responsibilities

• Design, implement, and optimize security solutions for enterprise assets, data, and systems.
• Provide guidance in evaluating and deploying security tools and frameworks.
• Develop security automation and integration across platforms using Python/PowerShell/Bash.
• Collaborate with SOC, threat intel, and IT teams to address risks.
• Ensure solutions meet regulatory requirements and governance standards.
• Lead major security initiatives with proper documentation and risk assessments.
• Mentor engineers and share knowledge through training and docs.
• Stay ahead of threats and evolving security technologies.

Skills

Security architecture

Threat modeling

Automation scripting

Incident response

Communication skills

Education

CS/InfoSec degree

Tools

NGFW

WAF

EDR

IDS/IPS

DLP

SSO

MFA

SIEM

CASB

SWG

SASE

PAM

IAM

Zero Trust

Job description

Ascensus is seeking a Principal Security Engineer to shape security strategy and lead major initiatives. You will design and implement solutions, mentor engineers, and collaborate with SOC, threat intel, and IT teams to strengthen resilience across the enterprise.

The ideal candidate has 7+ years in security roles, deep expertise in NGFW/WAF/EDR/IDS-IPS/DLP, cloud security, and automation. Remote work options available with strong communication skills.