Principal Security Engineer
Divya KattaRemoteSENIORPosted 5d ago
Threat modelingSTRIDEAttack treesAbuse casesMicroservicesAPIsCI/CDIAMAWSGuardDutySecurity HubCloudTrailIaCTerraformCloudFormationSASTDASTContainer securityKubernetes securityVulnerability managementWizQualysCDNCloudFrontCloudflareAkamaiWAFBot managementCache poisoning
About the Role
We are looking for a Principal Security Engineer to join our team. This role requires 6–8 years of experience in application and cloud security, with a track record at principal or senior-lead level, maintaining a hands-on approach.
Key Responsibilities
• Implement threat modeling as a working practice (STRIDE, attack trees, abuse cases) across microservices, APIs, CI/CD, and IAM
• Perform detection engineering on AWS using GuardDuty, Security Hub, CloudTrail, and custom detections
• Build prevention measures into delivery through IaC guardrails (Terraform / CloudFormation), SAST/DAST wired into pipelines, and container and Kubernetes security
• Guide engineering teams through security principles and practices
Requirements
• 6–8 years of experience in application and cloud security
• Experience with threat modeling techniques (STRIDE, attack trees, abuse cases)
• Knowledge of AWS security tools (GuardDuty, Security Hub, CloudTrail)
• Familiarity with IaC guardrails (Terraform / CloudFormation)
• Experience with SAST/DAST tools and pipelines
• Understanding of container and Kubernetes security
Benefits