Principal Security Engineer

Responsibilities

• Design and implement secure architectures for applications, APIs, microservices, and containerized workloads
• Develop and enforce application security best practices across SDLC and CI/CD pipelines
• Conduct threat modeling, security design reviews, and risk assessments
• Lead the AI security program, including risk frameworks and governance for AI/ML systems and LLM integrations
• Review AI tool features for risks like prompt injection, data leakage, and model poisoning
• Provide technical leadership and mentorship to security engineers and DevOps personnel
• Lead response to complex security incidents and conduct root cause analysis

Requirements

• 10+ years of experience in security engineering or architecture roles
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field
• Deep expertise in AWS and infrastructure-as-code (Terraform, CloudFormation)
• Strong experience in application security (OWASP Top 10, SAST, DAST)
• Experience designing zero-trust architectures and secure API gateways
• Proficiency in Python, Go, or JavaScript
• Hands-on experience assessing security risks of AI/ML systems (OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF)

Preferred Qualifications

• Certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC
• Familiarity with Kubernetes security and cloud-native security tooling
• Experience in regulated industries like fintech or healthcare
• Experience with AI red-teaming or adversarial ML
• Knowledge of emerging AI regulatory frameworks like the EU AI Act

About the Company

Ethos is a leading life insurance technology company on a mission to protect families by democratizing access to life insurance and empowering agents at scale.