Principal Security Engineer Jobs
Principal Security Engineer jobs are open across financial services, healthcare, cloud computing, defense contracting, and enterprise technology, from senior individual contributor to staff and principal levels, with specializations in cloud security architecture, application security, and threat modeling. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 348+ Principal Security Engineer jobs
Job Description and Requirements
Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Principal Application Security Engineer to join our amazing IT Security team!
The Principal Application Security Engineer will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
- Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem.
Essential Functions and Responsibilities:
- Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.
- Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.
- Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
- Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.
- Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.
- Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
- Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
- Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.
- Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
- Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate. All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)
Requirements:
- Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
- Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
- Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
- Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
- Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.
- Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
- Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.
- Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.
- Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives. High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.
Skills / Certification / Licensing:
- Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.
- Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.
- Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.
- Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.
- Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.
- Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship. Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities.
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.
Job Description and Requirements
Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Principal Application Security Engineer to join our amazing IT Security team!
The Principal Application Security Engineer will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
- Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem.
Essential Functions and Responsibilities:
- Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.
- Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.
- Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
- Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.
- Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.
- Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
- Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
- Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.
- Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
- Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate. All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)
Requirements:
- Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
- Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
- Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
- Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
- Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.
- Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
- Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.
- Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.
- Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives. High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.
Skills / Certification / Licensing:
- Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.
- Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.
- Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.
- Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.
- Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.
- Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship. Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities.
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.
See All 348+ Principal Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsPrincipal Security Engineer Job Market
Who's Hiring
- Microsoft20
- Raytheon16
- Oracle12
- Northrop Grumman10
- Palo Alto Networks10
Top Industries Hiring
- Technology & Software26
- Banking & Financial Services4
- Retail3
- Distribution & Wholesale3
- Science & Research2
What Employers Look For
The qualifications that appear most often in principal security engineer jobs.
- 8 or more years of hands-on security engineering experience across multiple domains
- Deep expertise in cloud security architecture on AWS, Azure, or Google Cloud Platform
- Active CISSP, CISM, or equivalent advanced security certification
- Demonstrated experience leading threat modeling and security design reviews
- Proficiency with SIEM platforms, EDR tooling, and security automation frameworks
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Principal Security Engineer Job Search
Tailor your resume to reflect architecture scope
Principal-level hiring managers want to see that you've owned security programs end-to-end, not just executed tasks. Reframe your bullets to show decisions you drove, threat models you authored, and how your work reduced organizational risk at scale.
Highlight certifications that match the domain
CISSP, OSCP, and cloud-specific certifications like AWS Security Specialty carry different weight depending on the role's focus. Read each job description carefully and lead with the credential that maps to that team's primary environment.
Apply early to roles that fit
Migrate Mate lists principal security engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by security domain before applying
Principal security engineer roles split sharply between AppSec, CloudSec, GRC, and detection engineering. Applying broadly wastes time. Identify your strongest domain and target openings where your depth is a direct match to the team's core problem.
Prepare a threat modeling walkthrough for interviews
Most principal-level interviews include a technical deep-dive where you're asked to model threats against a live system or architecture diagram. Practice narrating your process aloud, covering assumptions, attack surfaces, and mitigations, not just the final output.
Negotiate scope and reporting line, not just pay
At the principal level, the team structure and reporting relationship shape what you can actually accomplish. Before accepting an offer, confirm whether the role reports into engineering or the CISO, and whether you'll have dedicated headcount or advisory influence only.
Principal Security Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most principal security engineers?
The companies hiring the most principal security engineers right now include Microsoft, Raytheon, and Oracle, with the largest share of openings in California, Washington, and Virginia, based on current listings on Migrate Mate as of November 2026. Financial services firms and cloud-native technology companies consistently account for a large portion of active postings.
How many principal security engineer jobs are remote?
About 80% of principal security engineer openings are fully remote or hybrid as of November 2026, reflecting the role's advisory and architecture-heavy nature. Cloud security, application security, and GRC-focused positions tend to have the highest share of remote or distributed arrangements compared to roles tied to on-premises infrastructure or classified government environments.
How do you become a principal security engineer?
Most principal security engineers start in a mid-level security engineering or software engineering role and build depth in one domain before broadening. You progress by owning increasingly complex security programs, mentoring junior engineers, and demonstrating that your decisions have measurable impact on organizational risk. Advanced certifications and a portfolio of published threat models or security architecture documents strengthen your candidacy at this level.
Can you get hired as a principal security engineer without prior principal-level experience?
Yes, but you'll need to close the gap through evidence rather than titles. Employers promoting into the principal level look for engineers who have already operated at that scope informally, leading cross-functional security reviews, defining standards, or driving program-level decisions without being asked. Document those contributions explicitly in your resume and be prepared to discuss them in a technical leadership interview.
What does the principal security engineer interview process look like?
The process typically runs four to six rounds and includes a recruiter screen, a technical phone interview covering your security domain expertise, a system design or threat modeling exercise, and a leadership panel where you discuss how you've influenced engineering culture and risk decisions. Some employers add a take-home architecture review or a live coding exercise focused on security tooling or detection logic.
Where can I find and apply to principal security engineer jobs?
You can find and apply to principal security engineer jobs on Migrate Mate, which lists current openings from across the United States in one place. Search for roles that match your domain and experience level, then apply directly to each listing that fits.
See All 348+ Principal Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs