> Markdown version of [/jobs/ext/4013498-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/4013498-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Engineer

- **Company:** Altruist Corp
- **Location:** Daly City, CA, United States
- **Experience:** Expert
- **Salary:** $226,000.0 - $300,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, Cloud Computing, Cyber Security, Computer Engineering, Spring Framework, Key Management, Network Segmentation, Systems Development Life Cycle, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Software Security, Model Validation, Kubernetes, Information Technology, Terraform
- **Published:** October 29, 2026
- **Apply:** https://www.careerbuilder.com/job-details/principal-security-engineer-san-francisco-ca--943011c5-ddec-4cae-ac2c-088ed8e3af0e

## About the Role

Wealth Management, Artificial Intelligence (AI), Financial Planning, Brokerage, Security Architecture, Amazon Web Services (AWS), Java, Security Design, Threat Modeling, Model Review, * Experience- 10+ years in security with significant time in a security architecture or senior engineering role:

 * Deep experience securing AWS and Kubernetes at scale
 * Strong application security and secure-design / threat-modeling background
 * Working knowledge of cryptography and key management
 * Experience defining zero-trust and identity architecture
 * Education- A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
 * Technical aptitude- You're technologically savvy and fluent across modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, AWS, etc.)
 * Ownership- The pride you put into every aspect of your work is unparalleled and undeniable
 * Superb communication- Intentional dialogue is a superpower. You listen as well as you share your perspective with others.
 * Resilience- We're inspired by your unwavering determination to achieve success, no matter the adversity you face along the way.
 * Assurance- Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives.
 * Creative problem solving- Identifying the problem is simply not enough. You're instinctually creative with your approach in finding solutions to roadblocks.

Bonus points if you bring

 * Experience working in regulated environments (SEC/FINRA, fintech, or clearing/broker-dealer)
 * Experience with cryptographic isolation / envelope encryption or searchable encryption
 * Relevant certifications (e.g., CISSP, CCSP, SABSA)

## Description

* Own security architecture and reusable reference patterns across our AWS environment, Kubernetes (EKS), and Java/Spring platform.
 * Lead security design reviews and threat modeling for new products and services
 * Define standards for encryption and key management, identity and zero trust, network segmentation, and service-to-service authentication/authorization.
 * Drive our encryption strengthening program and cloud guardrails
 * Partner with Engineering, Cloud, and IT to embed security into the SDLC and infrastructure by default.
 * Advise on security architecture for strategic initiatives, integrations, and framework alignment.