Principal Security Engineer
DriveWealth4 hours ago
Remote, United States +6 moreStaff+
Base Salary
$215k - $235k/yr
Responsibilities
- Design and implement reusable security architecture patterns, automated guardrails, and technical controls across product and corporate systems.
- Own complex security initiatives from design and testing through deployment, maintenance, and measurable control improvement.
- Engineer cloud, network, workload identity, encryption, segmentation, endpoint, identity, SaaS, application, container, and data security controls.
- Build and maintain security operations platforms, telemetry pipelines, detections, analytics queries, response playbooks, and containment automation.
- Automate code, dependency, container, infrastructure, compliance evidence, data discovery, classification, retention, and secure deletion workflows.
- Support threat hunting, incident response, vulnerability remediation, regulatory examinations, and post-incident hardening.
- Mentor engineers, conduct design and code reviews, document architectures and runbooks, and influence cross-functional technical decisions.
Requirements
- 10+ years of relevant security, software, or infrastructure engineering experience leading complex initiatives from architecture through production operation.
- Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
- Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS.
- Strong software and automation skills in Python or a comparable language, with practical experience using Terraform, CI/CD, GitOps, and security as code.
- Experience building and operating security platforms, telemetry pipelines, detections, response automation, and vulnerability-management capabilities.
- Experience in regulated financial services or another environment with demanding availability and audit requirements.
- Required familiarity with NIST CSF or SP 800-53; brokerage, SEC/FINRA, privacy compliance, Okta, JumpCloud, and relevant security, AWS, Kubernetes, or GIAC certifications are preferred or advantageous.
- Bachelor’s degree in a related field or equivalent practical experience.
- Strong architectural judgment, troubleshooting, prioritization, risk management, cross-functional influence, and technical mentoring skills.
Benefits
- Base pay range of $215,000–$235,000 USD, plus eligibility for bonus, equity, and a 401(k) match.
- Medical, dental, vision, disability, and paid parental leave benefits.
- Wellness reimbursement, company-provided phone, personal development allowance, generous paid time off, and observed holidays.
- Open to candidates in New York City, Chicago, Austin, Dallas, Denver, Miami, the San Francisco Bay Area, or Seattle.
- New York City and Chicago require office attendance on a cadence set by the hiring manager or team; Austin, Dallas, Denver, Miami, San Francisco, and Seattle are fully remote with occasional office visits.
Tech Stack
Categories
About DriveWealth
DriveWealth builds a global B2B Brokerage-as-a-Service platform that lets banks, broker-dealers, asset managers, digital wallets, and consumer brands embed investing via APIs. Its broker-dealer subsidiary self-clears trades, provides custody, and supports products like U.S. equities, ETFs, mutual funds, fixed income, options, and fractional shares; securities are offered through a FINRA/SIPC member. Headquartered in New York, it monetizes through brokerage, clearing, custody, and platform fees.