Principal Security Engineer
DriveWealth3 hours ago
Remote, United States +6 moreStaff+
Base Salary
$185k - $205k/yr
Responsibilities
- Design reusable security architecture patterns, automated guardrails, and controls across product and corporate systems.
- Own complex security initiatives from design and testing through deployment, maintenance, and measurable control improvement.
- Engineer cloud, network, endpoint, identity, application, container, and data security across AWS, Kubernetes, Windows, macOS, Okta, JumpCloud, and SaaS systems.
- Build and maintain SIEM, SOAR, endpoint security, vulnerability management, telemetry, detection, and automated response capabilities.
- Support threat hunting and incident response through containment automation and post-incident hardening.
- Automate code, dependency, container, infrastructure, and compliance evidence scanning and remediation workflows.
- Implement data discovery, classification, access control, encryption, retention, secure deletion, and regulatory recordkeeping controls.
- Mentor engineers, conduct design and code reviews, document architectures and runbooks, and influence cross-functional technical decisions.
Requirements
- 10+ years of relevant security, software, or infrastructure engineering experience.
- Demonstrated leadership of complex security initiatives from architecture through production operation.
- Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
- Strong knowledge of endpoint, identity, and SaaS security across Windows and macOS.
- Strong Python or comparable-language software and automation skills, with practical Terraform, CI/CD, GitOps, and security-as-code experience.
- Experience building and operating security platforms, telemetry pipelines, detections, and response automation.
- Experience in regulated financial services or another environment with demanding availability and audit requirements.
- Familiarity with NIST CSF or SP 800-53 is required; brokerage, SEC/FINRA, and privacy compliance experience are preferred.
- Bachelor’s degree in a related field or equivalent practical experience.
- Relevant security, AWS, Kubernetes, or GIAC certifications are preferred.
- Strong architectural judgment, troubleshooting, prioritization, cross-functional influence, and mentoring skills.
Benefits
- New York City and Chicago employees work in the office on a cadence set by the Hiring Manager or team.
- Employees in Austin, Dallas, Denver, Miami, the San Francisco Bay Area, or Seattle may work fully remotely, with occasional onsite visits.
- The role is limited to candidates in the listed locations and does not accommodate remote work outside them.
- Benefits include equity, a 401(k) match, medical, dental, vision, and disability insurance, paid parental leave, wellness reimbursement, a company-provided phone, personal development allowance, generous PTO, and observed holidays.
Tech Stack
Categories
About DriveWealth
DriveWealth builds a global B2B Brokerage-as-a-Service platform that lets banks, broker-dealers, asset managers, digital wallets, and consumer brands embed investing via APIs. Its broker-dealer subsidiary self-clears trades, provides custody, and supports products like U.S. equities, ETFs, mutual funds, fixed income, options, and fractional shares; securities are offered through a FINRA/SIPC member. Headquartered in New York, it monetizes through brokerage, clearing, custody, and platform fees.