> Markdown version of [/jobs/ext/2120347-sr-principal-dt-security-engineer-90397492-null](https://www.wearedevelopers.com/jobs/ext/2120347-sr-principal-dt-security-engineer-90397492-null). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Principal DT Security Engineer - 90397492 - null - **Company:** Amtrak - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $149,400.0 - $193,644.0 - **Contract:** Contract - **Skills:** Application Programming Interfaces (APIs), Intrusion Detection Systems, Python (Programming Language), Open Web Application Security, Security Information and Event Management, Simple Object Access Protocol (SOAP), Systems Integration, Software Security, Mitre Att&ck, Containerization, Apache Kafka, Cyber Warfare, Programming Languages - **Published:** August 19, 2026 - **Apply:** https://careers.amtrak.com/talentcommunity/apply/1420827700/?locale=en_US ## About the Role * Bachelor's Degree or equivalent combination of education, training and/or relevant experience. * Plus 9 years of relevant work experience., * Bachelor's Degree or equivalent combination of education, training and/or relevant experience. * Plus 11 years of relevant work experience. Knowledge, Skills, and Abilities * Excellent customer service, communication, and interpersonal skills essential for collaborative teamwork and self-motivation. * Proficiency in identifying and implementing security measures, including understanding adversary tactics and tools. * In-depth knowledge of security frameworks such as OWASP, CVSS, MITRE ATT&CK and ATLAS, and MITRE SHIELD/ENGAGE/D3FEND/, as well as Security Development Lifecycle (SDL) and threat modeling.. * Advance expertise with NIST SP 800-160v2 for developing cyber resilient systems. * Experience managing a diverse security ecosystem encompassing SIEM/SOAR, EDR/AV, CASB, IDS/IPS, DLP, UEBA, FW, IAM/SSO and containerization technologies. * Demonstrated ability to influence strategy and solve highly complex, ambiguous security challenges with broad organizational impact. * Proven ability to lead large, multi-disciplinary initiatives and influence stakeholders across the organization without direct authority. * Expertise in designing, developing, and troubleshooting scripts and applications using Python or other modern programming languages, with extensive experience integrating REST, SOAP, vendor-specific APIs, and event-streaming platforms such as Apache Kafka to automate, optimize, and scale business processes and system integration ## Description Leads the development and evolution of enterprise cybersecurity capabilities by shaping security strategy, advancing cyber defense architectures, and addressing emerging threats across the organization. Serves as a recognized expert in cybersecurity engineering, influencing enterprise risk posture and guiding long-term security direction. Drives large-scale, cross-functional initiatives to design, integrate, and optimize cyber defense solutions that enhance resilience and protect critical systems, data, and operations., * Define and influence enterprise cybersecurity strategy and architecture, ensuring alignment with evolving threat landscapes, business priorities, and regulatory frameworks. * Lead large-scale, cross-functional cyber defense initiatives across platforms, systems, and business domains, driving the implementation of resilient and scalable security solutions. * Serve as a recognized expert in cybersecurity engineering, providing advanced guidance on complex threats, systemic vulnerabilities, and risk mitigation strategies with significant enterprise impact. * Direct the evolution of cyber defense capabilities, including deployment, integration, optimization, and automation of security technologies across the enterprise. * Anticipate emerging threats and industry trends to proactively shape security roadmaps, influence senior leadership decisions, and strengthen organizational resilience. ## Related Videos - [How to Benchmark Your Apache Kafka](https://www.wearedevelopers.com/videos/76-how-to-benchmark-your-apache-kafka) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Let's Get Started With Apache Kafka® for Python Developers](https://www.wearedevelopers.com/videos/565-let-s-get-started-with-apache-kafka-for-python-developers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Tips, Techniques, and Common Pitfalls Debugging Kafka](https://www.wearedevelopers.com/videos/838-tips-techniques-and-common-pitfalls-debugging-kafka) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)