Security & Compliance Principal Engineer

USA018 Thomson Reuters Holdings Inc.; Eagan (MN); On-site; USD 159,000 - 295,000; Full time

Benefits offered by this job

Health insurance

401k match

Paid time off & holidays

Parental leave

Job summary

Thomson Reuters seeks a Principal Software Engineer in Security & Compliance to define the technical direction for SOC 2, ISO 27001/42001, HIPAA, and FedRAMP across CoCounsel’s infrastructure. You will own architecture, implement controls in cloud environments, and partner with security, legal, and product teams to earn and maintain trust with customers and auditors.

The role combines backend engineering (Python/Java/Go on AWS) with leadership, threat modeling, incident response, and audit

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related field, or equivalent experience.
• Direct hands-on experience building or operating production systems with SOC 2 Type II, ISO 27001 and/or HIPAA.
• Experience supporting FedRAMP authorization processes at Moderate or High baseline.
• Deep backend engineering experience (Python, Java, Go) on AWS or similar cloud provider.
• Knowledge of security frameworks (NIST SP 800-53, NIST CSF, CIS Benchmarks).
• Hands-on IAM experience (SSO, SAML, OIDC, OAuth2, RBAC/ABAC), encryption, and audit logging.

Responsibilities

• Own the compliance architecture across SOC 2, ISO 27001/42001, HIPAA, and FedRAMP requirements.
• Build compliance as code with automated evidence collection and continuous monitoring.
• Design encryption, key management, data residency, tenant isolation, and audit logging for large-scale data and AI interactions.
• Provide technical leadership and cross-functional influence with Security, Legal, Privacy, and Product teams.
• Establish SLOs, observability, and incident response practices for compliance-critical systems.

Skills

Security architecture

SOC 2 Type II

ISO 27001

HIPAA

FedRAMP

Backend engineering

AWS

Identity & access mgmt

Threat modeling

Incident response

SAML/OIDC

RBAC/ABAC

Education

Bachelor's degree in CS/CE or equivalent

Tools

Python

Java

Go

AWS

Job description

Thomson Reuters seeks a Principal Software Engineer in Security & Compliance to define the technical direction for SOC 2, ISO 27001/42001, HIPAA, and FedRAMP across CoCounsel’s infrastructure. You will own architecture, implement controls in cloud environments, and partner with security, legal, and product teams to earn and maintain trust with customers and auditors.

The role combines backend engineering (Python/Java/Go on AWS) with leadership, threat modeling, incident response, and audit