Principal Risk Engineer

📋 Description

• Lead cybersecurity risk assessments for apps, infra, cloud, and third-party solutions
• Evaluate security exceptions, risk acceptances, and compensating controls
• Partner with cross-functional teams to identify risks and define practical mitigations
• Assess security implications of AI and ML technologies
• Communicate technical risks and recommendations to technical and non-technical stakeholders
• Strengthen standards, governance, and secure-by-design practices across the org

🎯 Requirements

• 7+ years in security engineering across multiple domains (architecture, cryptography, cloud, mobile, web)
• Experience leading or contributing to threat modeling
• Experience partnering with product teams across the SDLC using secure-by-design
• Experience reviewing security exceptions, risk acceptances, and compensating controls
• Knowledge of security risks from AI/ML systems and generative AI tools
• Knowledge of security frameworks and standards (NIST, ISO 27001, CIS Controls, FAIR)

🎁 Benefits

• Paid time off, retirement savings plans, and equity options
• Health benefits and parental leave
• Employee Resource Groups and inclusive culture
• Diversity and Pay Parity report available
• Equal opportunity employer statement