Principal Software Developer- Security

Lead the design and implementation of scalable, secure data platform solutions while shaping the technical roadmap and addressing technical debt

Collaborate with product, architecture, engineering, and security teams to translate requirements into high-quality technical solutions

Embed Secure SDLC practices by integrating automated security testing, static analysis, dependency scanning, and Infrastructure as Code (IaC) scanning into CI/CD workflows

Participate in threat modeling and help teams mitigate risks through secure design and engineering guidance

Build and maintain systems that support security monitoring, observability, anomaly detection, and compliance reporting

Plan and deliver software releases using Agile methodologies, promoting open/inner-source development models

Drive continuous improvement in engineering processes, secure coding practices, and system design to reduce complexity and improve quality

Conduct reviews and audits of SDLC processes and remediate vulnerabilities, misconfigurations, and security defects across the platform

Stay up to date on industry trends, best practices, and technologies

Promote collaboration through open/inner source development models

Apply continuous attention to technical excellence, secure coding principles and good design, resulting in a straightforward solution and reducing complexity

Foster a culture of innovation, accountability, technical excellence, and secure engineering across teams

Communicate effectively with stakeholders, providing regular updates on progress, risks, and key metrics

Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cyber Security, Information Security, or related field

8+ years of experience in software engineering with a strong emphasis on security-focused development

Experience in upholding and enforcing comprehensive code quality standards and best practices

Deep expertise in AWS, including IAM, KMS, EC2, S3, RDS, Lambda, networking security, encryption, and secure-by-design cloud architecture

Proficiency in Python and experience building security-focused software (e.g., authentication/authorization services, secrets management, audit/logging frameworks, threat detection or analytics tooling)

Applied knowledge of OWASP Top 10 and secure software engineering principles, with demonstrated experience implementing them in production systems

Hands-on experience with CI/CD pipelines and automation using tools such as Jenkins, Git Lab CI, or CircleCI

Strong understanding of Infrastructure as Code (IaC) using Terraform or Cloud Formation

Proven ability to integrate security controls into engineering workflows, including CI/CD security automation (SAST, SCA, IaC scanning) and participation in threat modeling and design reviews

Experience with Snowflake, or similar cloud data warehousing platforms

Proven ability to design and implement scalable, secure data or platform solutions

Excellent problem-solving, debugging, collaboration, and communication skills

Experience working within Agile/Scrum development processes

Experience with other programming languages such as Java or Go

Knowledge of data governance and compliance standards (e.g., SOC, FedRAMP, GDPR)

Security certifications such as AWS Security Specialty, CISSP, CCSP, GWEB, GSEC, GCSA, or equivalent, demonstrating a strong understanding of modern security practices