> Markdown version of [/jobs/ext/4721773-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/4721773-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Engineer - **Company:** NetDocuments Software, Inc. - **Location:** Lehi, UT, United States - **Experience:** Expert - **Salary:** $200,000 - $220,000 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software as a Service, Cloud Computing Security, Cyber Security, Continuous Integration, Software Design Patterns, Intrusion Detection and Prevention, Python (Programming Language), EndPointSecurity, Software Security - **Published:** November 14, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7962481b5aae1384 ## About the Role * 10+ years in security engineering, with demonstrated depth in at least two of: cloud security, detection engineering, identity, platform/infrastructure security, or application security * Track record as a senior individual contributor who has owned ambiguous, cross-team technical problems end to end * Strong hands-on cloud security experience, with AWS strongly preferred, including identity, network, and workload controls * Substantial automation and scripting ability (Python, Go, or similar) and comfort working in infrastructure-as-code and CI/CD environments * Working knowledge of security operations and incident response, sufficient to provide technical leadership during a major incident * The judgment and communication skills to represent security credibly with executives and auditors without day-to-day supervision What Will Make You Stand Out * Prior experience as a deputy, second-in-command, or acting security leader * Experience with modern cloud security posture, endpoint detection, identity, and SaaS security tooling * Relevant certifications, such as CISSP, GSE, GCIA, GCSA, or cloud-security specialties * Experience in a SaaS or regulated environment (legal or financial services), and familiarity with compliance frameworks such as SOC 2 or ISO 27001 * Experience building security automation and control-verification tooling at scale ## Description As the most senior individual contributor on our security team, you will take on the hardest technical problems across cloud, platform, identity, and detection, the ones that span teams and have no obvious owner. You will raise the engineering bar for the whole function, shaping how controls are designed, built, automated, and proven to auditors. You will also hold enough working context to step in for security leadership when needed, so that monitoring, controls, and in-flight programs keep moving without interruption. This is a deliberately senior hire: broad command of the security stack, real depth in at least two areas, and the judgment to make calls without escalation. Security is central to the promise we make to the legal and professional-services firms that trust us with their most sensitive information, and this role plays a direct part in keeping that promise. You will: * Lead the most complex technical security work across cloud, platform, identity, and detection, including problems that cross team boundaries * Set and raise the engineering standard for the security team: design patterns, code and configuration review, automation, and the quality bar for how controls are built and evidenced * Partner with security operations and architecture on advanced detection engineering, threat hunting, secure-by-design reviews, and technical leadership during major incidents * Own the build-out and integration of security tooling across the environment * Own the technical evidence behind our control attestations, so controls are not only operating but demonstrable to auditors and leadership * Automate security operations and control verification, making coverage continuously measurable rather than point-in-time * Mentor engineers and analysts across the team * Serve as the senior technical stand-in for security leadership, maintaining working knowledge of the control environment and in-flight programs, and representing security in cross-functional and executive forums