Principal Software Engineer - Security

We are looking for a highly skilled and experienced Secure Software Engineer to ensure that all software developed meets corporate security guidelines and industry best practices. This role involves mentoring engineers, performing secure code reviews, and integrating security into production software across distributed teams.

Key Responsibilities:

• Ensure all software developed adheres to corporate security guidelines and industry best practices.
• Perform secure code reviews, vulnerability assessments, and remediation of identified security issues.
• Mentor, educate, and train engineers on secure coding practices and application-level security.
• Document security standards, plans, and produce time estimates and schedules for assigned work.
• Collaborate with architects and program management to align security requirements with technical direction.
• Operate across geographic boundaries in a distributed software engineering environment.
• Write, integrate, and deliver secure software, demonstrations, and integrations.

Required Qualifications:

• Master's or Doctorate in Computer Science, Software Engineering, Cybersecurity, or related field.
• 8+ years of software engineering experience, including at least 5 years focused on application-level security.
• Prior production software development experience in C, C++, Python, or other relevant languages.
• Strong background in secure coding practices, threat modeling, and vulnerability remediation.
• Experience working in agile software environments using Jira or similar tools.

Preferred Certifications:

• CISSP (Certified Information Systems Security Professional)
• CSSLP (Certified Secure Software Lifecycle Professional)
• CEH (Certified Ethical Hacker)
• OSWE (Offensive Security Web Expert) or similar advanced application security certifications

Knowledge and Skills:

• Strong technical expertise in application-level security and secure software engineering.
• Knowledge of secure coding standards, OWASP Top 10, and emerging security threats.
• Ability to influence and guide engineers across diverse, distributed teams.
• Experience integrating security into production software development lifecycles.