Principal Security Engineer, Infrastructure & AI Guardrails

United States Digital Space LLC; Boston (MA); On-site; USD 244,000 - 366,000; Full time

Job summary

Klaviyos in the United States is seeking a Principal Engineer, Security to own infrastructure security architecture across IAM, secrets, network defenses, and compliance controls.

This hands-on IC role collaborates with the Core Infrastructure PE, SRE, and AppSec teams to make security by default a reality for every engineering team. You will lead threat modeling, guardrails, and vulnerability management to reduce risk at scale.

Qualifications

• 10+ years in infrastructure or platform security engineering.
• Deep cloud security expertise (IAM, service mesh mTLS, secrets).
• Ability to translate security work into business language.
• Experience with security tooling and automation in CI/CD pipelines.

Responsibilities

• Define and own the company's infrastructure security architecture: IAM frameworks, service-to-service auth, secrets management, network segmentation, and production access controls, designed to scale with our multi-tenant, multi-region footprint.
• Build and maintain security guardrails as IaC modules; codify controls into golden paths that teams inherit automatically so security improves with velocity, not against it.
• Own the vulnerability management program: SLO-backed triage and remediation, trend tracking, and systemic fixes, turn recurring vulnerability classes into solved engineering problems.
• Define the security SLO and compliance framework for production infrastructure; run readiness reviews, communicate posture clearly to engineering and exec stakeholders.
• Author security ADRs and RFCs; partner with the Core Infrastructure PE to embed security controls in CI/CD pipelines, paved roads, and the observability stack.
• Lead threat modeling and security design reviews for high-risk architectural changes, accelerate delivery by making reviews lightweight and high-signal.
• Partner with SRE, AppSec, and FinOps on cross-cutting initiatives: zero-trust progress, GDPR/compliance guardrails, and audit readiness for SOC 2/ISO 27001.
• Write high-impact code, automation, and tooling; mentor Staff and Senior security engineers across teams through design pairing, code review, and example.
• Transform workflows by putting AI at the center, building smarter systems and ways of working from the ground up.

Skills

Security engineering

Cloud security (AWS/GCP)

CI/CD security

Threat modeling

Automation

Job description

Klaviyos in the United States is seeking a Principal Engineer, Security to own infrastructure security architecture across IAM, secrets, network defenses, and compliance controls.

This hands-on IC role collaborates with the Core Infrastructure PE, SRE, and AppSec teams to make security by default a reality for every engineering team. You will lead threat modeling, guardrails, and vulnerability management to reduce risk at scale.