Principal Security Engineer, Ethos Life

• 10+ years of experience in security engineering or architecture roles
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution
• Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation)
• Strong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling)
• Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls
• Proficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices
• Demonstrated leadership in cross-functional security initiatives and technical mentorship
• Ability to come into our San Francisco, CA office once a week

Desirable

• We’re seeking a Principal Security Engineer with deep expertise in cloud security, application security, and security architecture to join our growing security team
• This role will report directly to CISO
• In this role, you'll lead the design and implementation of scalable, secure systems across cloud platforms and modern application stacks, guiding both strategic security initiatives and day-to-day security engineering operations
• This is a high-impact role that will shape the security posture of our platforms and development practices, working across engineering, DevOps, architecture, and compliance teams
• Design and implement secure architectures for applications, APIs, microservices, and containerized workloads
• Develop and enforce application security best practices across SDLC; partner with DevOps and engineering teams to integrate security into CI/CD pipelines
• Conduct threat modeling, security design reviews, and risk assessments for new and existing systems
• Evaluate and implement cloud security tools, controls, and frameworks (e.g., CSPM, CWPP, IAM, KMS, logging, and monitoring)
• Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel
• Lead response to complex security incidents or architectural flaws; conduct root cause analysis and recommend strategic remediations
• Contribute to and influence security policies, standards, and governance
• Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations