Source description
About the role
About the Role We are looking for a Principal Cyber Security Engineering to help us enable and adopt security engineering practices across our product engineering lifecycle. This is a high-impact, hands-on role. You will partner directly with engineering and other functional leaders to define security engineering architecture, adopt and implement security engineering with embedded security testing across our product lifecycle and implement a continuous improvement program to transform our engineering into a DevSecOps organization. Position Summary Do you believe that security should be a catalyst for software velocity, not a bottleneck. Can you be the bridge between security engineering and our development community. Then, your mission is two-fold: architecting and implementing robust security practices throughout our Software Development Lifecycle (SDLC), and actively scaling adoption by mentoring, educating, and empowering our engineering teams. The ideal candidate loves writing code, designing secure systems, and building thriving developer communities (like Security Champions programs) that make security a shared cultural value. Key Responsibilities Security Engineering & Architecture Design the Paved Road: Architect, embed, and automate security controls directly into CI/CD pipelines (SAST, DAST, SCA, container scanning, and secrets management) to provide developers with real-time feedback. -Threat Modeling: Lead and scale threat modeling practices across diverse engineering product lines, transforming it from a manual exercise into a repeatable, developer-led discipline. -Secure Architecture Patterns: Define, build, and maintain reusable secure coding frameworks, libraries, and reference architectures that make the secure way the easiest way for developers. -Vulnerability Management: Partner with development teams to triage, prioritize, and remediate vulnerability findings, providing technical guidance and code-level remediation advice. Community Scaling & .