Golang Job: Principal Security Engineer

Position Overview

We are looking for a Principal Security Engineer to help to further secure our customer data, applications and infrastructure. This person will actively collaborate with team members and the wider engineering community in producing quality deliverables in an efficient manner. This person will understand the AWS security landscape & deploy controls to prevent, detect and respond to those security threats. They will work across many security teams including infrastructure, engineering, operations, incident response, and offensive security to develop scalable solutions. In addition, they will actively collaborate and share ideas, thoughts and challenges with peers both inside and outside the team.

Primary Responsibilities

• Guide shift-left adoption by introducing and improving security testing mechanisms into the company’s CI/CD pipelines (SAST, DAST, SCA, etc.).
• Develop high-quality, secure, stable code for use by security and the wider engineering community.
• Work with security stakeholders to define needs and design solutions relevant to solving a security problem.
• Extend and improve existing off the shelf security tooling in order to fit into client use cases.
• Maintain, troubleshoot, document, and debug code, as required.
• Mentor and pair with junior engineers to help them reach their potential
• Research external best practices and emerging software and security technologies for possible incorporation into platform/applications and methodologies.

Minimum Qualifications

• Strong software engineering and/or SecOps experience
• Strong experience securing infrastructure in AWS (IAM, VPC, EC2, Lambda, RDS, Elasticache, S3, etc.) via automation.
• Strong development skills in Python, Golang or related language.
• Strong design & development experience in Agile development environment
• Strong communication skills with the ability to converse with multiple types of audiences
• Strong experience with REST and/or Graph APIs.
• Proficiency with building, maintaining CI/CD pipelines using Jenkins, Docker and modern deployment methodologies.

#CplTechnology22