Principal Engineer, Security

Responsibilities

• Define and own infrastructure security architecture including IAM, secrets management, and network segmentation
• Build and maintain security guardrails as IaC modules to create automated golden paths
• Own the vulnerability management program, including triage, remediation, and trend tracking
• Define security SLOs and compliance frameworks for production infrastructure
• Author security ADRs and RFCs and partner with Core Infrastructure teams
• Lead threat modeling and security design reviews for high-risk architectural changes
• Partner with SRE, AppSec, and FinOps on zero-trust and compliance initiatives (SOC 2/ISO 27001)
• Write high-impact code, automation, and tooling to mentor other engineers
• Integrate AI into security workflows to build smarter, automated systems

Requirements

• 10+ years in infrastructure or platform security engineering
• Deep expertise in cloud infrastructure security (AWS/GCP IAM, service mesh mTLS, secrets management)
• Experience defining security SLOs and managing vulnerability MTTR
• Developer-centric mindset with experience building tools for engineering adoption
• Proven ability to influence cross-functional teams through technical design and code
• Operational experience with security incident response and on-call rotations
• Strong technical writing skills for ADRs and RFCs
• Experience using or implementing AI tools for automation or threat detection

Preferred Qualifications

• Experience with zero-trust architecture in large multi-tenant SaaS environments
• Familiarity with SOC 2, ISO 27001, and GDPR compliance frameworks
• Track record of embedding security tooling into CI/CD and IaC pipelines
• Experience securing AI/ML systems, including model access controls and data privacy

About the Company

Klaviyo empowers creators to own their destiny by making first-party data accessible and actionable. The platform sends billions of messages and processes petabytes of customer data for hundreds of thousands of businesses.