Principal Security Engineer, Altruist

• Experience - 10+ years in security with significant time in a security architecture or senior engineering role:
• Deep experience securing AWS and Kubernetes at scale
• Strong application security and secure-design / threat-modeling background
• Working knowledge of cryptography and key management
• Experience defining zero-trust and identity architecture
• Education - A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
• Technical aptitude - You’re technologically savvy and fluent across modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, AWS, etc.)
• Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
• Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others
• Resilience - We’re inspired by your unwavering determination to achieve success, no matter the adversity you face along the way
• Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives
• Creative problem solving - Identifying the problem is simply not enough. You’re instinctually creative with your approach in finding solutions to roadblocks
• If you’re excited about this role, but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles

Desirable

• Altruist is in the midst of an exciting phase and we’re excited to hire a Principal Security Engineering / Security Architect to define secure-by-design architecture across our cloud, applications, and identity platforms
• You’ll set the patterns and standards that let us scale a self-clearing broker-dealer safely
• Own security architecture and reusable reference patterns across our AWS environment, Kubernetes (EKS), and Java/Spring platform
• Lead security design reviews and threat modeling for new products and services
• Define standards for encryption and key management, identity and zero trust, network segmentation, and service-to-service authentication/authorization
• Drive our encryption strengthening program and cloud guardrails
• Partner with Engineering, Cloud, and IT to embed security into the SDLC and infrastructure by default
• Advise on security architecture for strategic initiatives, integrations, and framework alignment