Principal Security Engineer

Role Overview

• Serve as a recognized technical authority across IT, Security, and Leadership, translating complex technical risk into clear business and regulatory context for executives, security leaders, and stakeholders including legal and regulatory teams.
• Design, implement, and govern comprehensive security solutions across multiple platforms utilizing a variety of security tools, programming languages, and services, operating with near-complete autonomy.
• Design automation and engineering patterns that enhance the efficiency, scalability, and durability of security operations enterprise-wide.
• Define how diverse technologies are normalized and integrated end-to-end to streamline analysis and response capabilities across environments.
• Mentor Senior and junior engineers as a technical role model, and document the standards and engineering patterns governing complex security products and services.
• Identify systemic risk across the organization’s security posture and design enterprise-wide mitigations and remediation strategies.
• Introduce new methodologies, reference architectures, and operating models to resolve systemic security challenges and advance the security program.
• Lead enterprise technology evaluations and adoption decisions, assessing the relevance and long-term impact of emerging technologies on our security posture.
• Define, own, and enforce engineering standards, continuously assessing the effectiveness of security controls and driving improvements across the enterprise.
• Shape and drive the security engineering strategy and roadmap, influencing senior engineers, and leaders across organizations.
• Partner with and influence cross-functional teams to embed security into the development lifecycle and operational processes.
• Lead security assessments and audits, ensuring compliance with internal policies and external regulations.
• Lead the technical response for the highest-severity incidents, directing containment, investigation, and recovery efforts.
• Stay at the forefront of industry trends, security standards, and best practices, ensuring Cboe’s systems remain resilient against evolving threats.

Requirements

• Proven principal-level experience (minimum 10 years) in information security, with recognized, authoritative depth across multiple security domains and a strong focus on architecture, engineering, and operations.
• Experience and knowledge on current security technologies (Databahn, Google Secops, Bindplane, ProofPoint, Microsoft Security)
• Proficiency in scripting and automation for security operations.
• Experience with Linux/Unix and Windows administration, including Active Directory (AD) and EntraID.
• Proficiency with the Microsoft Security Stack (Defender for Endpoint, Defender for Identity, Defender for CloudApps, Purview DLP, Intune)​
• Bachelor's Degree in Cybersecurity or Computer Science (preferred)

Tech Stack

• Cyber Security
• Linux
• Unix

Benefits

• Fair and competitive salary and incentive compensation packages with an upside for overachievement
• Generous paid time off, including vacation, personal days, sick days and annual community service days
• Flexible, hybrid work environment
• Health, dental and vision benefits, including access to telemedicine and mental health services
• 2:1 401(k) match, up to 8% match immediately upon hire
• Discounted Employee Stock Purchase Plan
• Tax Savings Accounts for health, dependent and transportation
• Employee referral bonus program
• Volunteer opportunities to help you give back to your communities
• Complimentary lunch, snacks and coffee in any Cboe office
• Paid Tuition assistance and education opportunities
• Generous charitable giving company match
• Paid parental leave and fertility benefits
• On-site gyms and discounts to other fitness centers