158 principal security engineer jobs at 57 companies in Tiburon, CA
1mo
Save
Mark Applied
Hide
1mo
Principal Security Engineer
San Francisco or California
$319k-$479k/yrRemoteFull Time
BlockNYSE: XYZ: Creates financial tools for businesses and individuals.
10+ YOE10+ years developing production software, 5+ years focused on scaling security practices, technical leadership at principal level, strong system design, security expertise, and ability to write production-quality security automation code.
8+ YOE8+ years in Offensive Security/Red Teaming, cloud expertise (GCP/AWS/Azure), Kubernetes security, IaC/CI–CD security, and led pentests/red team ops.
Senior Principal Engineer, Offensive Security (2026-345)
San Jose, California, United States
$190k-$240k/yrOnsiteFull Time
Astera LabsNASDAQ: ALAB: Designs connectivity solutions for cloud and AI infrastructure.
12+ YOEBachelor's in CS/CE/EE or related,12+ years offensive security experience,expertise in hardware/firmware/embedded/cloud or AD,proficiency in Python/C/C++/assembly,knowledge of MITRE ATT&CK,track record driving remediation.
Principal Cyber Security Engineer, Strategy and Architecture
Carlsbad or Reston or Marlborough or Tempe or San Jose or New York City
$230k-$363k/yrHybridFull Time
ViasatNASDAQ: VSAT: Provider of global satellite-based connectivity and secure communication solutions.
10+ YOEBachelor's or Master's in a technical field, 10+ years in security/systems/network engineering, strong risk analysis and secure system design experience, hands-on with enterprise security tools, US citizenship, up to 20% travel.
LendingClubNYSE: LC: Digital marketplace bank providing personal loans and banking services.
10+ YOE10+ years in IAM, information security, or security engineering; bachelor's degree or equivalent experience; expertise in identity security, enterprise architecture, PAM, automation, regulated environments, and audit controls.
SailPoint, Okta, Active Directory, AWS, Terraform, GitHub, Delinea, Thycotic Secret Server, Infrastructure-as-Code, AI
Principal Security Engineer | Cyber Defense Engineering
Santa Clara, California, United States
$221k-$387k/yrRemoteFull Time
ServiceNowNYSE: NOW: Provides a cloud platform for automating enterprise digital workflows.
15+ YOE15+ years in security engineering and 5+ years in software engineering, including enterprise architecture, threat modeling, AI security, and cross-domain security strategy. Bachelor’s, master’s, or PhD preferred.
New York City or Seattle or Washington or San Francisco or United States
$347k-$490k/yrRemoteFull Time
OpenAI: Develops artificial intelligence models and generative AI software services.
Staff/principal-level offensive security expertise, domain knowledge in cloud/Kubernetes/web/Linux/macOS, experience building production software and agent systems, strong judgment and communication.
Principal Security Engineer | Cyber Defense Engineering
Santa Clara, California, United States
$221k-$387k/yrRemoteFull Time
ServiceNowNYSE: NOW: Enterprise cloud platform for digital workflow automation.
15+ YOERequires 15+ years in security engineering, 5+ years in software engineering, enterprise-scale architecture, multi-domain security direction, and AI threat expertise. Bachelor's, master's, or PhD preferred.
Staff / Principal Software Engineer, Infrastructure Security
Stockholm or London or Boston or New York City or San Francisco
OnsiteFull Time
Lovable: Build custom software and websites using natural language AI.
8+ YOE8+ years in infrastructure or cloud security, including 3+ at staff or principal level; expertise in GCP, AWS, Cloudflare, Kubernetes, Terraform, and security practices; Go, Python, or Rust programming.
Johnson & JohnsonNYSE: JNJ: Provides pharmaceutical products and medical technology healthcare solutions.
8+ YOEBachelor's degree or equivalent experience, 8+ years in cybersecurity or related disciplines, and expertise in threat modeling, secure development, vulnerability management, penetration testing, security reviews, and risk assessment.
CVSS, ISO 14971, AAMI TIR57, IEC 62304, IEC 81001-5-1, HIPAA, GDPR, HITRUST, ISO 27001, OWASP Top 10, SOC 2, FedRAMP, AWS, Microsoft Azure, C, C++, C#, Java, Python
Johnson & JohnsonNYSE: JNJ: Develops and manufactures pharmaceutical drugs and medical devices.
8+ YOEBachelor's degree or equivalent experience, 8+ years in cybersecurity or related disciplines, and expertise in threat modeling, secure development, vulnerability management, penetration testing, security reviews, and risk assessment.
CVSS, ISO 14971, AAMI TIR57, IEC 62304, IEC 81001-5-1, HIPAA, GDPR, HITRUST, ISO 27001, OWASP Top 10, SOC 2, FedRAMP, AWS, Azure, C, C++, C#, Java, Python
UnitedHealth GroupNYSE: UNH: Provides health insurance and technology-enabled health care services.
7+ YOEAssociate's degree, 7+ years Palo Alto firewall experience, 5+ years cloud security and security architecture experience, firewall policy compliance and remediation, Splunk/AlgoSec familiarity, strong communication and leadership.
Atlanta or Boston or San Francisco or Scottsdale or Seattle
$169k-$311k/yrOnsiteFull Time
AxonNASDAQ: AXON: Develops weapons and software for law enforcement and safety.
10+ YOE10+ years in security, platform, infrastructure, or SRE roles; expert Kubernetes; AWS/Azure; software and automation skills; CI/CD, container security, infrastructure-as-code, incident leadership, observability, and US citizenship.
Oakland or Long Beach or El Dorado Hills or Rancho Cordova or San Diego or Woodland Hills or California
$168k-$252k/yrHybridFull Time
Ascendiun: Nonprofit parent overseeing health insurance and clinical service organizations.
10+ YOEBachelor's or equivalent, 10+ years relevant experience (2+ years in Application Security), strong knowledge of OWASP Top Ten and STRIDE, Agile, regulatory certifications (HIPAA, SOC2, PCI-DSS, FedRAMP), AI/ML experience desired.
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
9+ YOE9+ years of relevant experience; deep expertise in IAM, endpoint, network and SaaS security; familiarity with zero trust, threat modeling, SOC 2/ISO 27001; experience with Google Workspace, Okta, MDM, SSPM, and cloud-native environments.
Google Workspace, Okta, MDM, SSPM, ZTA, SOC 2, ISO 27001