Principal Security Engineer
Procore Technologies2 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Define the long-term technical roadmap for Procore’s autonomous security strategy.
- Design agentic identity governance for JML processes, service-to-service authentication, and least-privilege PAM.
- Build an agentic orchestration layer for asset inventory, SBOM generation, and real-time attack-surface management using LangGraph, Semantic Kernel, and CrewAI.
- Develop self-healing Kubernetes and Terraform infrastructure that detects and corrects drift, misconfigurations, and vulnerabilities.
- Create continuous threat-modeling and automated purple-team workflows across microservices.
- Design trust boundaries and controls for internal and customer-facing AI, including sandboxing, output verification, and cross-agent authentication.
- Conduct technical security assessments of third-party platforms and M&A targets.
- Mentor Staff and Senior engineers and advise senior leadership on AI security and autonomous defense posture.
Requirements
- 10+ years of experience in a high-level technical security role, including at least four years focused on large-scale SaaS.
- Expert software engineering skills in Python and Go with a security specialization.
- Deep, verifiable experience building and shipping autonomous agent systems in production.
- Expertise in LLM orchestration, tool-calling protocols, and multi-agent state management.
- Expert-level cloud security and container-orchestration knowledge, with AWS preferred.
- Mastery of OIDC and OAuth 2.0 and their application to agentic identity and cryptographically verifiable authority.
- Deep understanding of LLM attack surfaces, including training-data poisoning, prompt injection, and RAG-based data leakage, with production mitigation experience.
- Deep understanding of encryption at rest and in transit and KMS for sensitive autonomous data handling.
- Ability to align complex agentic initiatives with business and product goals.
- Ability to apply prompt engineering as a deterministic, testable, and safe formal-logic discipline.
- Strong communication skills with both executive leadership and engineering teams.
Benefits
- The role is based in Procore’s Bengaluru, India office.