> Markdown version of [/jobs/ext/1189173-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/1189173-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Engineer

- **Company:** Curative Inc.
- **Location:** Austin, TX, United States (Remote available)
- **Experience:** Expert
- **Salary:** $175,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Microsoft Windows, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cyber Security, Linux, Github, Identity and Access Management, Information Technology Operations, Networking Hardware, Intrusion Detection and Prevention, Systems Development Life Cycle, Security Information and Event Management, Software Vulnerability Management, Datadog, Cloud Platform System, Office365, Large Language Models, Snowflake, Software Security, Mitre Att&ck, Containerization, Kubernetes, Hashicorp, Cloudflare, Nintex, Gsuite, Terraform, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** July 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=94b34da3ee423865

## About the Role

Bachelor's degree in a related field or equivalent experience., * 8+ years in security engineering with demonstrated growth into technical leadership

 * Hands-on SIEM experience (DataDog, ELK, or equivalent)
 * Deep AWS security and IAM expertise
 * Application security fundamentals: threat modeling, SAST/DAST, secure SDLC
 * Experience building with AI/LLM APIs and practical knowledge of LLM security risks
 * EDR, DLP, and vulnerability management experience
 * Experience with containerized workloads and Kubernetes security
 * Proven track record of mentoring engineers and raising team capability

Nice to Have

 * CISSP, GIAC, or OSCP certification
 * MITRE ATT&CK knowledge applied to detection engineering
 * "Security as code" experience (OPA, Checkov, tfsec, or similar)
 * Data science or anomaly detection skills applied to security telemetry
 * Healthcare industry background (HIPAA, HITRUST)
 * Experience with the following tools/technologies: Kubernetes/EKS, Terraform/Terragrunt, Atlantis, Cloudflare, Buildkite, Wiz, Semgrep, EscapeTech, GitHub Advanced Security, Datadog, HashiCorp Vault, N8N, Snowflake, Linear

## Description

We're looking for a Principal Security Engineer to own our security engineering function end-to-end from defining platform strategy to hands-on implementation. This is a technical leadership role: you'll set the bar for how security is built and operated across our infrastructure, applications, and AI systems, and actively grow the engineers around you.

This team moves fast, and you should be excited about interacting with a wide variety of stakeholders. The right fit for this role has a strong interest in building tools, is comfortable working with new technologies, and has a strong sense of enabling business operations through secure designs. This role will be to design, deploy and maintain all tooling that supports Security Operations

Finally it's important to us that everyone on our team be prepared to work with and supportive of a variety of backgrounds, roles, and needs. Our organization is built on trust and mutual respect, we know that it's only together that we achieve truly great things., Detection, Response & Visibility

 * Own strategy and hands-on engineering for Detection and Response platforms; identify, onboard, and normalize all log sources including cloud, containers, endpoints, and SaaS
 * Build and maintain Security Orchestration, Automation, and Response (SOAR) tooling to reduce response time and analyst toil
 * Lead incident response for complex threats including developing runbooks, driving post- incident improvements, and designing/running BCP/DR tabletop exercises.

Application Security

 * Embed security into the SDLC: threat modeling, secure design reviews, SAST/DAST tooling, and automated security gates in CI/CD pipelines
 * Own the vulnerability management program at host and application levels; track and drive remediation
 * Champion "security as code" practices across engineering teams

AI & Security

 * Build AI-powered security tooling: threat detection and anomaly identification at appropriate confidence thresholds, automated triage and remediation workflows, and AI-assisted post- mortem summarization
 * Define and implement the security model for LLM-based systems and internal AI tooling
 * Architect harness patterns to constrain LLM behavior and harden against prompt injection, indirect injection via RAG pipelines, and data exfiltration via model outputs
 * Evaluate and govern AI tool adoption from a security and data-risk perspective

Infrastructure & Platform Security

 * Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS (M365, Google Workspace, Azure)
 * Engineer, configure, and operate EDR, DLP, and endpoint security programs
 * Provide IAM architecture expertise across identity and access systems

Leadership & Mentorship

 * Mentor and actively develop junior and mid-level security engineers through design reviews, pairing, and direct feedback. Growing team capability is a core expectation of this role
 * Define and drive security engineering standards across the organization
 * Collaborate closely with IT operations, platform, and software to translate threat intelligence into detection and hardening priorities


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)