Principal Cybersecurity Engineer

We are seeking a highly skilled Principal cybersecurity engineer to architect the development of our internal suite of Cybersecurity Risk Management and Automation tools. This role requires a rare blend of deep domain expertise in security risk and the technical ability to bridge the gap between high-level strategy and robust software execution. As a Principal engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams.

Responsibilities

Architect the development of our internal suite of Cybersecurity Risk Management and Automation tools; Serve as the primary visionary for how our risk data is structured, analyzed, and automated; Act as the bridge between the Cybersecurity Risk organization and our Engineering teams; Architect high-level business and security end-states into sophisticated process designs and technical specifications; Own the translation of risk philosophy into the logic used by our engineering squads; Serve as the definitive Subject Matter Expert (SME) for defining risk metrics and calculation methodologies within Enterprise Risk (ERM) and Third-Party Risk (TPRM); Champion security risk automation across the organization, mentoring junior engineers and influencing stakeholders on best practices for data-driven risk modeling

Requirements

9+ Years of Experience building custom GRC (Governance, Risk, and Compliance) platforms; Demonstrable proficiency in Python, Go, or Java with a strong background in version control (Git), API design, and the ability to build complex PoCs for risk models; Proven mastery of the end-to-end SDLC, including the creation and oversight of comprehensive SRS documentation, Project Plans, and Product Backlogs; Ability to define System Architectures, Data Models (ERDs), and API specifications while enforcing rigorous QA standards through formalized Test Plans, automated Build Scripts, and Production Operations manuals; Experience leading the technical roadmap for software engineering teams or data scientists without direct reporting authority; Validated proficiency in data pipeline logic, ELT/ETL processes, and data quality assurance, specifically as they apply to automating security telemetry; Strategic Technical Translation: architect high-level business and security end-states into sophisticated process designs and technical specifications; Risk Domain Authority: serve as definitive Subject Matter Expert for defining risk metrics and calculation methodologies within Enterprise Risk (ERM) and Third-Party Risk (TPRM); Cross-Functional Influence: champion security risk automation across the organization, mentoring junior engineers and influencing stakeholders on best practices for data-driven risk modeling; Mastery of Cybersecurity Risk with a proven track record of designing and implementing Enterprise and Third-Party Risk Management (TPRM) programs at scale; Demonstrated ability to take a blank slate and define complex security processes, translating them into technical user stories, functional specifications, and logic diagrams; Expertise in quantitative risk analysis (e.g., Monte Carlo simulations or FAIR methodology) and how to programmatically apply these models to software

Benefits

Workday Bonus Plan or role-specific commission/bonus; annual refresh stock grants; comprehensive benefits; flexible work schedule