Principal Cybersecurity Engineer Jobs
Principal Cybersecurity Engineer jobs are open across defense, financial services, healthcare, and enterprise technology, from senior individual contributor to staff and principal levels, with specializations in cloud security, threat architecture, and identity and access management. Find a role that fits from the openings below and apply directly.
Find JobsOverview
Showing 5 of 71+ Principal Cybersecurity Engineer jobs
San Antonio, Texas
Cyber Defense
Cyber Threat Intelligence
ICAM CAM-Post
System Security
Zero Trust
REQ#: RQ231554
Public Trust: None
Requisition Type: Pipeline
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Lead Cybersecurity Engineering, Architect:
Join GDIT’s mission‑driven team supporting the Department of Defense as we help unify the Air Force’s cyber defense to outpace threats with shared insight, faster decisions, and stronger mission protection.
MEANINGFUL WORK AND PERSONAL IMPACT:
- The Lead Cybersecurity Engineering, Sr. Principal owns the large DoW Defensive Cyber security posture end to end, from Zero Trust architecture to RMF/ATO lifecycle management.
- The Lead Cybersecurity Engineer/SME is responsible for the end-to-end architectural design, technical implementation, and strict configuration management of all security boundaries and active cyber defenses, and maintains complete responsibility for the enterprise Risk Management Framework (RMF) lifecycle, including authoring all RMF documentation, generating required security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoW guidance and NIST SP 800-37.
- The role implements and enforces the DoW Zero Trust strategy by designing the enterprise Identity, Credential, and Access Management (ICAM) framework, including identity providers (IdP), privileged access management (PAM), Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).
- The role also leads incident response and threat intelligence operations: designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as the centralized repository for Cyber Threat Intelligence, establishing workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.
Technical acumen required:
- Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA), NIST RMF (SP 800-37), SIEM/SOAR engineering, EDR platforms, and MISP administration.
- Must be able to lead CJCSM 6510.01B-compliant incident response, as this role develops, manages, and continuously refines overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.
- Daily SCIF access is essential given the need for continuous access to classified threat intelligence feeds and incident response coordination.
- This role is the technical anchor for the win themes around enforced test standards/compliance and synchronized threat intelligence.
QUALIFICATIONS - WHAT YOU’LL NEED TO SUCCEED:
- Bachelor’s degree in a relevant field and 12–15 years in cybersecurity engineering; 8+ years RMF/ATO leadership; 5+ years designing Zero Trust/ICAM architectures; 5+ years enterprise IR/threat hunting experience
- Security Clearance Level: Top Secret with SCI eligibility
- Certification: Certified Information Systems Security Professional (CISSP)
- Location: San Antonio region, TX
- US citizenship required
GDIT IS YOUR PLACE:
- Full-flex work week to own your priorities at work and at home.
- 401K with company match.
- Comprehensive health and wellness packages.
- Internal mobility team dedicated to helping you own your career.
- Professional growth opportunities including paid education and certifications.
- Cutting-edge technology you can learn from.
- Rest and recharge with paid vacation and holidays.
Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in program management at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your passion for the mission and delivering results.
Work Requirements
8 + years of related experience
- may vary based on technical training, certification(s), or degree
Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)
10-25%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $169,604 - $229,464. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
San Antonio, Texas
Cyber Defense
Cyber Threat Intelligence
ICAM CAM-Post
System Security
Zero Trust
REQ#: RQ231554
Public Trust: None
Requisition Type: Pipeline
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Lead Cybersecurity Engineering, Architect:
Join GDIT’s mission‑driven team supporting the Department of Defense as we help unify the Air Force’s cyber defense to outpace threats with shared insight, faster decisions, and stronger mission protection.
MEANINGFUL WORK AND PERSONAL IMPACT:
- The Lead Cybersecurity Engineering, Sr. Principal owns the large DoW Defensive Cyber security posture end to end, from Zero Trust architecture to RMF/ATO lifecycle management.
- The Lead Cybersecurity Engineer/SME is responsible for the end-to-end architectural design, technical implementation, and strict configuration management of all security boundaries and active cyber defenses, and maintains complete responsibility for the enterprise Risk Management Framework (RMF) lifecycle, including authoring all RMF documentation, generating required security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoW guidance and NIST SP 800-37.
- The role implements and enforces the DoW Zero Trust strategy by designing the enterprise Identity, Credential, and Access Management (ICAM) framework, including identity providers (IdP), privileged access management (PAM), Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).
- The role also leads incident response and threat intelligence operations: designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as the centralized repository for Cyber Threat Intelligence, establishing workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.
Technical acumen required:
- Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA), NIST RMF (SP 800-37), SIEM/SOAR engineering, EDR platforms, and MISP administration.
- Must be able to lead CJCSM 6510.01B-compliant incident response, as this role develops, manages, and continuously refines overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.
- Daily SCIF access is essential given the need for continuous access to classified threat intelligence feeds and incident response coordination.
- This role is the technical anchor for the win themes around enforced test standards/compliance and synchronized threat intelligence.
QUALIFICATIONS - WHAT YOU’LL NEED TO SUCCEED:
- Bachelor’s degree in a relevant field and 12–15 years in cybersecurity engineering; 8+ years RMF/ATO leadership; 5+ years designing Zero Trust/ICAM architectures; 5+ years enterprise IR/threat hunting experience
- Security Clearance Level: Top Secret with SCI eligibility
- Certification: Certified Information Systems Security Professional (CISSP)
- Location: San Antonio region, TX
- US citizenship required
GDIT IS YOUR PLACE:
- Full-flex work week to own your priorities at work and at home.
- 401K with company match.
- Comprehensive health and wellness packages.
- Internal mobility team dedicated to helping you own your career.
- Professional growth opportunities including paid education and certifications.
- Cutting-edge technology you can learn from.
- Rest and recharge with paid vacation and holidays.
Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore a career in program management at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your passion for the mission and delivering results.
Work Requirements
8 + years of related experience
- may vary based on technical training, certification(s), or degree
Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)
10-25%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $169,604 - $229,464. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
Principal Cybersecurity Engineer Jobs by Experience Level
See All 71 Principal Cybersecurity Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsPrincipal Cybersecurity Engineer Job Market
Who's Hiring
- Northrop Grumman12
- Leidos3
- T-Mobile3
- MITRE2
- SpaceX2
Top Industries Hiring
- Telecommunications
- Technology & Software
What Employers Look For
The qualifications that appear most often in principal cybersecurity engineer jobs.
- Ten or more years of progressive cybersecurity experience with at least three in a senior or lead role
- Active CISSP, CISM, or equivalent enterprise security certification
- Demonstrated experience designing zero-trust or defense-in-depth security architectures at scale
- Proficiency with cloud security controls across AWS, Azure, or Google Cloud environments
- Experience leading security program strategy, roadmap development, and cross-functional stakeholder communication
- Familiarity with compliance frameworks including NIST CSF, SOC 2, ISO 27001, or FedRAMP
Tips for Your Principal Cybersecurity Engineer Job Search
Tailor your resume to architecture depth
Principal-level postings screen for evidence of system-wide security design, not just implementation. Lead each bullet with the architecture decision you owned, the threat model it addressed, and the outcome, not just the tools you used.
List certifications in priority order
CISSP, CISM, and cloud-provider security specializations carry different weight depending on the employer's stack. Put the certification that matches the posting's environment first on your credentials line so screeners see the right signal immediately.
Apply early to roles that fit
Migrate Mate lists principal cybersecurity engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target postings that name your threat domain
Search for your specific specialty, whether that's OT security, zero-trust implementation, or red-team program leadership, not just the title. Postings that name your domain get far fewer competing applicants than generic principal engineer searches.
Prepare a technical design narrative
Principal interviews almost always include a whiteboard or async architecture exercise. Walk through one past security architecture you designed end-to-end, including the constraints you faced and the tradeoffs you made, so you can adapt it to any scenario they present.
Negotiate scope before you negotiate pay
At the principal level, the reporting structure, program ownership, and whether you have hiring authority shape the role's actual value. Clarify those before you get to compensation, because a constrained scope with a high title is a lateral move in practice.
Principal Cybersecurity Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most principal cybersecurity engineers?
The companies hiring the most principal cybersecurity engineers right now include Northrop Grumman, Leidos, and T-Mobile, with the largest share of openings in California, Texas, and Virginia, based on current listings on Migrate Mate as of November 2026. Defense contractors, large financial institutions, and cloud-native technology companies consistently post the highest volume of principal-level security roles.
How many principal cybersecurity engineer jobs are remote?
About 42% of principal cybersecurity engineer openings are fully remote or hybrid as of November 2026, making it one of the more flexible senior engineering roles. Threat architecture, cloud security, and governance-focused positions tend to offer the most remote flexibility, while roles tied to classified environments or on-premises infrastructure typically require on-site presence.
How do you become a principal cybersecurity engineer?
Becoming a principal cybersecurity engineer typically requires progressing from a security analyst or engineer role through senior and lead positions while building ownership of increasingly complex architecture decisions. Earning enterprise-recognized certifications, leading cross-functional security initiatives, and demonstrating program-level impact rather than task execution are the steps that distinguish principal candidates from senior ones.
Can you get a principal cybersecurity engineer job without deep leadership experience?
It's difficult, because most principal postings treat program ownership and cross-team influence as baseline expectations rather than growth opportunities. The most realistic path without a formal leadership title is to document the security architecture decisions you drove independently, the business risk you quantified, and the teams whose roadmaps you shaped, then apply to companies where the principal role is defined as a technical track rather than a people-management step.
What does the principal cybersecurity engineer interview process look like?
The process typically runs across multiple rounds, starting with a recruiter screen focused on scope and seniority, followed by a technical panel covering threat modeling, architecture tradeoffs, and your approach to security program design. Most employers at this level also include a cross-functional interview with product, engineering, or legal stakeholders to assess how you communicate risk and drive alignment outside the security team.
Where can I find and apply to principal cybersecurity engineer jobs?
You can find and apply to principal cybersecurity engineer jobs on Migrate Mate, which lists current openings from across the United States. Find roles that match your background and apply directly to each listing from the results on this page.
See All 71 Principal Cybersecurity Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs