Principal Security Engineer (AI)

Location: Remote (US based)

Company

A SaaS platform for modern accounting firms, replacing legacy accounting practice management systems and serving most of the Top 500 firms in the country.

What you will do

• Improve security across CI/CD pipelines, build infrastructure, dependencies, and deployment processes.
• Own vulnerability scanning and remediation capabilities, including tooling, automation, prioritization, and engineering workflow integration.
• Partner with engineering teams on application, cloud, infrastructure, customer-data, access-control, API, and third-party integration security.
• Lead threat modeling and security reviews for critical systems and support sound architectural decisions.
• Explore AI security capabilities and address risks from AI-assisted development, agents, and LLM integrations.
• Drive security initiatives from design through implementation, establish practical standards, and build security expertise across engineering.

Requirements

• Strong engineering background in software, platform, infrastructure, or security engineering, with hands-on experience building and operating complex systems.
• Solid security fundamentals and practical experience improving security in software development, cloud infrastructure, or production environments.
• Experience with software delivery security, including CI/CD, vulnerability management, supply chain security, or related areas.
• Understanding of SaaS security, including protecting customer data, securing applications, and operating cloud-based services.
• An AI-forward mindset, with interest in emerging AI security capabilities and understanding of the opportunities and risks introduced by AI.
• Technical leadership and ownership, including driving complex initiatives, collaborating across teams, and balancing security with engineering needs.

Nice to have

• Software supply chain security experience with SLSA, SBOMs, artifact signing, or build provenance.
• Experience with SAST, SCA, container scanning, and security scanning or remediation tooling.
• Cloud-native security experience, particularly with AWS and Kubernetes.
• Experience with threat modeling, application security, identity, or secrets management.
• Experience with AI-powered security tooling or securing AI-assisted development workflows.
• Experience building or improving security engineering practices in a growing organization.

Culture & Benefits

• Remote-first organization with an AI-by-default working environment and access to AI tools.
• Competitive compensation and benefits, including stock options and 401(k) matching.
• Adventure Travel Stipend on each employment anniversary.
• Values include Relentless by Design, Owners not Renters, and Trust at the Core.
• Full-time role with an interview process involving real artifacts, role-relevant conversations, and reference checks.

Hiring process

• The detailed interview plan is shared during the intro call.
• The process includes role-relevant discussions, real artifacts to react to, and reference checks.