> Markdown version of [/jobs/ext/440131-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/440131-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Engineer - **Company:** Chewy, Inc. - **Location:** Bellevue, WA, United States - **Experience:** Expert - **Salary:** $170,500.0 - $271,500.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing Security, Cyber Security, Computer Networks, Data as a Services, Distributed Data Store, Distributed Systems, Amazon DynamoDB, Identity and Access Management, Information Systems Security Architecture Professional, Key Management, PostgreSQL, Network Segmentation, Systems Development Life Cycle, Kubernetes, Information Technology, Production Code, Terraform - **Published:** June 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b722dd55b141c1bd ## About the Role Do you have experience in System design for system development?, * Bachelor's degree or equivalent practical experience in computer science or engineering * 15+ years of engineering experience, with substantial hands-on work in cybersecurity engineering and architecture * Demonstrated experience building and operating security controls in production, not just designing or recommending them * Deep, practical expertise in securing AWS environments, including IAM, networking, compute, and managed data services * Strong hands-on experience with Kubernetes/EKS security, including pod/workload identity, network policies, and runtime controls * Proven experience securing distributed data systems, including DynamoDB and PostgreSQL-based platforms * Ability to read, review, and meaningfully influence production code and infrastructure-as-code * Track record of owning security outcomes across multiple teams through influence rather than direct authority * Experience turning ambiguous risk and business requirements into concrete technical designs and implementations * Strong written and verbal communication skills, with the ability to explain complex technical decisions to senior engineers and leadership * Comfortable operating in environments with incomplete information, evolving requirements, and real operational risk Bonus: * Prior experience securing high-scale e-commerce or consumer-facing platforms * Experience building self-service security platforms or guardrails used by multiple engineering team. * Strong infrastructure-as-code background (e.g., Terraform) with security-first design * Experience integrating security into CI/CD pipelines and developer workflows * History of leading or significantly contributing to post-incident architectural improvements ## Description As a Principal Cybersecurity Engineer, you will operate at the intersection of architecture, engineering, and execution, owning critical security domains and influencing security outcomes across dozens of teams. You will work deeply within AWS-based platforms, Kubernetes (EKS), and data services, setting technical direction while remaining directly engaged in solving complex security engineering problems. This role requires sustained hands-on technical contribution, deep system-level thinking, and the ability to lead through influence in a fast-moving, high-scale e-commerce environment. What You'll Do: * Design, review, and contribute to security architectures and implementations across cloud, application, data, and platform layers * Own and evolve core security engineering capabilities (e.g., cloud security patterns, workload identity, network segmentation, secrets management, data protection) from design through production * Develop and maintain threat models, security requirements, and architectural guardrails for distributed systems running on public clouds. * Partner directly with engineering teams to embed security into system design and code, not as an after-the-fact review function * Define and implement secure-by-default patterns that teams can adopt without centralized friction * Lead technical decision-making for high-risk, high-impact security tradeoffs, including incident learnings and architectural remediation * Build and refine security engineering standards, reference architectures, and reusable components, and actively ensure they are implemented correctly * Diagnose and resolve the most complex security failures and design flaws in production systems * Establish measurable security outcomes (not just controls), and track progress against them * Mentor engineers by reviewing designs, code, and implementations, raising the bar through direct technical engagement * Influence hiring by setting clear expectations for senior and principal-level engineering excellence, and participating directly in interview loops ## Related Videos - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)