Note: The job is a remote job and is open to candidates in USA. DriveWealth LLC is seeking a Principal Security Engineer to design, build, and mature security capabilities across its brokerage platform and corporate environment. The role leads complex security engineering initiatives, secures cloud, product, and corporate systems, builds security operations platforms and automation, and implements controls supporting regulatory and data protection requirements.
Responsibilities
- Architecture Standards: Design and assist in the implementation of reusable security patterns and automated guardrails across product and corporate systems
- Engineering Delivery: Own complex initiatives from design and testing through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements
- Technical Leadership: Mentor engineers, conduct design and code reviews, and document architectures and runbooks. Influence technical decisions across Engineering and IT while balancing security, reliability, and delivery
- Cloud & Network Security: Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure, accounting for availability and trading latency
- Endpoint & Identity: Harden Windows and macOS, tune endpoint protection, and automate Okta and JumpCloud identity and device controls. Strengthen privileged access, phishing-resistant authentication, and secure configurations for Slack and other SaaS applications
- Application & Container Security: Embed threat modeling, API security, security testing, image signing, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows
- Exposure Management: Automate code, dependency, container, and infrastructure scanning. Partner with Engineering and IT to prioritize remediation, verify fixes, and prevent recurring vulnerabilities
- Security Platforms: Build, integrate, and maintain SIEM, SOAR, endpoint security, and vulnerability management services, including provisioning, monitoring, and documented maintenance and support procedures
- Detection & Automation: Engineer telemetry collection, normalization, and enrichment. Partner with Security & Threat Operations to develop and validate analytics queries, detections, and automated response playbooks across cloud, application, identity, and endpoint systems
- Incident Engineering: Provide subject matter expertise in support of threat hunting and incidents. Deliver containment automation and lead post-incident hardening
- Compliance Automation: Translate requirements defined with Legal, Compliance, and GRC into tested technical controls, including SEC Rule 17a-3 and 17a-4 recordkeeping capabilities. Automate evidence collection and support audits and regulatory examinations
- Data Security & Privacy: Build and maintain data discovery, classification, access control, encryption, retention, and secure deletion capabilities to support GDPR and other applicable privacy and data protection requirements
Skills
- 10+ years of relevant security, software, or infrastructure engineering experience, with a track record leading complex security initiatives from architecture through production operation
- Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access
- Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS
- Strong software and automation skills in Python or a comparable language and practical experience with Terraform, CI/CD, GitOps, and security as code
- Experience building and operating security platforms, telemetry pipelines, detections, and response automation, with attention to data quality, reliability, and maintainability
- Sound architectural judgment, strong troubleshooting skills, and the ability to prioritize risk, manage competing initiatives, influence cross-functional decisions, and mentor technical colleagues
- Experience in regulated financial services or another environment with demanding availability and audit requirements
- Familiarity with NIST CSF or SP 800-53 is required
- Bachelor's degree in a related field or equivalent practical experience
- Applicants must be authorized to work for any employer in the U.S. DriveWealth does not sponsor or take over sponsorship of an employment visa at this time
- For US-based roles: Applicants must be currently authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship. DriveWealth does not provide visa sponsorship or support for employment authorization, including transfers, at this time
- Experience with Okta, JumpCloud, or comparable platforms is preferred
- Brokerage, SEC/FINRA, and privacy compliance experience are preferred
- Relevant security, AWS, Kubernetes, or GIAC certifications are a plus
Benefits
- Equity
- 401(k) match
- Medical insurance
- Dental insurance
- Vision insurance
- Disability insurance
- Paid Parental Leave
- Wellness reimbursement
- A company-provided phone
- A personal development allowance
- Generous Paid Time Off (PTO)
- Observed holidays
- Fully remote role for candidates based in Austin, Dallas, Denver, Miami, San Francisco, or Seattle, with occasional visits to onsite offices
- Hybrid office schedule for candidates based in New York or Chicago
Company Overview