Principal Product Security Engineer, Cloud Security

As a Principal Product Security Engineer, Cloud Security, you will define and drive the technical vision for cloud security across large-scale, globally distributed SaaS platforms. You will lead strategic security architecture initiatives, establishing secure-by-default standards and scalable protection mechanisms across multi-cloud environments. Working closely with engineering leaders, platform architects, and security teams, you will help identify and mitigate complex security risks while strengthening infrastructure resilience. You will play a key role in embedding automated security controls into development workflows, improving cloud security posture, and ensuring compliance across highly regulated environments. This position combines hands-on technical expertise with strategic leadership, offering the opportunity to influence engineering practices at an enterprise scale. You will also mentor senior engineers and champion a collaborative culture focused on innovation, reliability, and security excellence.

• 10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high-growth SaaS organizations.

• Proven experience serving as a principal engineer or technical authority, leading large-scale security architecture initiatives, risk mitigation programs, and threat modeling activities.

• Strong hands-on expertise in multi-cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.

• Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP-compliant cloud offerings.

• Demonstrated experience leading architectural transformations, including securing microservices architectures and large-scale distributed systems.

• Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and internal tooling.

• Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security controls, and CI/CD security integrations.

• Deep understanding of cloud security architecture, Zero Trust principles, tenant data isolation, encryption, cryptographic systems, and multi-tenant SaaS environments.

• Experience with cloud detection engineering, distributed telemetry and logging, IAM graph analysis, least-privilege automation, and enterprise alert optimization.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical discipline, or equivalent practical experience.

• Exceptional technical leadership, communication, and stakeholder management skills, with the ability to influence executive leadership and cross-functional engineering teams.

• Proven ability to mentor senior engineers, encourage collaboration, and promote an inclusive engineering culture.

• Strong ownership mindset, proactive problem-solving abilities, and a passion for improving security through automation and continuous innovation.

Additional advantages:

• Experience developing internal software platforms or developer tools that automate security and compliance workflows.

• Contributions to open-source security projects, discovery and disclosure of CVEs, or active involvement in security frameworks.

• Experience presenting at recognized cybersecurity conferences or publishing security research.

• Advanced expertise in securing serverless architectures, service meshes, and large-scale Kubernetes environments.

• Experience designing security controls for regulated cloud environments, including sovereign, isolated, and FedRAMP offerings.