Principal Security Engineer - Threat Hunting

Description :

Job Summary :

We are seeking a highly experienced Principal Security Engineer to lead the design, implementation, and evolution of enterprise-wide security architecture and engineering practices.

This role requires deep technical expertise, strategic thinking, and strong leadership to protect applications, infrastructure, data, and cloud environments while enabling business innovation.

Key Responsibilities :

- Define and drive the overall security architecture and strategy across applications, cloud, infrastructure, and data platforms.

- Design and implement secure-by-design systems, ensuring security is embedded throughout the SDLC.

- Lead threat modeling, risk assessments, and security architecture reviews for critical systems.

- Establish and enforce security standards, policies, and engineering best practices.

- Act as a senior technical advisor to engineering leadership and product teams.

- Design and oversee application security, cloud security, and infrastructure security solutions.

- Lead incident response for high-severity security incidents and perform root-cause analysis.

- Drive DevSecOps initiatives including secure CI/CD pipelines, automation, and security tooling.

- Evaluate, select, and integrate security tools and platforms.

- Mentor and guide senior and junior security engineers across teams.

- Partner with compliance, risk, and legal teams to meet regulatory and audit requirements.

Mandatory Technical Skills & Expertise :

- 12+ years of experience in information security, security engineering, or related roles.

- Deep expertise in application security (OWASP Top 10, secure coding practices, SAST/DAST).

- Strong experience in cloud security (AWS, Azure, or GCP).

- Advanced knowledge of network security, identity and access management (IAM), and encryption.

- Hands-on experience with threat modeling frameworks and security architecture design.

- Strong understanding of DevSecOps, CI/CD security, and automation.

- Experience securing microservices, APIs, and containerized environments (Docker, Kubernetes).

- Expertise in incident response, vulnerability management, and risk assessment.

- Strong scripting or programming experience (Python, Go, Java, or similar)