Principal Security Engineering Manager

Responsibilities

• Lead the design and implementation of security controls across the full technology stack, including applications, services, and cloud infrastructure.
• Establish and drive secure development practices by integrating security into CI/CD pipelines and developer workflows.
• Own programs for vulnerability discovery, remediation, and continuous validation of security posture.
• Define and implement data protection strategies, including encryption, access controls, and data handling standards.
• Build and enhance identity and access control systems, ensuring least privilege and strong authentication.
• Develop and mature logging, monitoring, and detection capabilities to identify and respond to threats.
• Design and secure cloud and network architectures, including edge protection and service isolation.
• Partner with engineering, platform, and product teams to embed security into system design and architecture decisions.
• Mentor and guide engineers to raise the overall security and engineering maturity of the organization.

Requirements

• 12–16+ years of experience in security engineering, software engineering, or cloud security.
• Strong background in software development or DevOps with the ability to build or review code and automation.
• Deep understanding of secure application design, common vulnerabilities, and distributed systems.
• Expertise in cloud platforms (Azure preferred) and implementing security at scale in cloud-native environments.
• Strong knowledge of identity systems, access control models, and network/edge security principles.
• Proven ability to balance strategic thinking with hands-on technical execution.
• Excellent communication skills with the ability to influence engineering and leadership teams.

Preferred Qualifications

• Experience working in regulated environments such as healthcare or finance.
• Familiarity with modern AI/ML security considerations.
• Experience with large-scale telemetry and detection systems (e.g., SIEM platforms).
• Knowledge of industry standards and compliance frameworks.
• Relevant professional certifications (e.g., CISSP, OSCP, or cloud security certifications).

About the Company

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care.