Principal Security Engineer, Stellar Cyber

• Note: this role requires both prior software engineering and security operations knowledge or experience
• Experience in cybersecurity or SOC operations, with strong familiarity with security workflows, tools, and operational practices
• Solid software engineering skills, including coding skills to build and automate security workflows within tools or platforms, knowledge on software engineering tooling such as Git, and the ability to work with engineering members
• Proficiency in at least one modern programming language commonly used for tooling or automation (e.g., Python, TypeScript)
• Experience working with diverse security tools (e.g., SIEM, endpoint telemetry, intrusion detection, threat intelligence feeds) and integrating them into automated pipelines
• Ability to observe, document, and abstract complex operational behavior into repeatable, scalable software constructs
• Strong communication skills, with confidence explaining security concepts and engineering choices to varied audiences

Desirable

• We are looking for a highly skilled Principal Security Engineer with a passion for building the future of autonomous security operations into Stellar Cyber’s Open XDR platform
• You will join a mission-driven team where security engineering, software engineering, and machine learning research are blended to meet real-world SOC operations
• This role is not just about building platform features. It is about living and breathing security operations, interacting and working with SOC analysts to build AI agents, tools, and workflows that elevate the state of the art in alert investigation, threat hunting, and response automation
• Observe and study SOC practices first-hand such as alert investigation and threat hunting, internalize required context, and extract patterns for automation and tooling
• Build, extend, and maintain security-focused AI agents, tools, and workflows that support alert investigation, threat hunting, and response automation across the SOC lifecycle
• Translate complex security workflows and analyst behaviors into scalable automation primitives that power autonomous SOC capabilities
• Rapidly prototype and iterate on new tooling, integrations, and platform features based on real operational feedback
• Collaborate cross-functionally with product, research, and engineering to ensure tools meet both user needs and architectural standards
• Communicate insights and trade-offs to both technical and non-technical stakeholders, helping shape product and operational direction