Principal Security Engineer

eCapital Corp. is seeking a hands-on security professional to design and build the security environment protecting its business. The role owns security architecture and data protection, implements controls with the infrastructure team, and provides guidance across projects and other cybersecurity domains.

Responsibilities:

• Design the overall security environment for the organization’s hybrid platforms, including cloud platforms and the tools we use to build and deploy software
• Take a lead role in protecting our data: how it is classified, stored, accessed, encrypted, backed up, and recovered
• Build the security controls you design, working alongside the infrastructure team to implement them into production and operationalize
• Evaluate new technologies, including AI tools and services, and assess how they can be adopted safely
• Review new projects and systems early, and give practical guidance to ensure security is built in rather than added later
• Produce clear standards, patterns, and documentation that the wider team can understand, implement and maintain
• Share knowledge with the security operations team so they can monitor and support what is being build
• Support other security and cybersecurity domains as needed, such as incident response, risk assessments, audits, vendor reviews, or awareness activities
• Other duties assigned by direct, department, or division leadership

Requirements:

• Significant experience (typically 10+ years) in cybersecurity, with a track record of designing and implementing security environments, in addition to operating them
• Strong, practical experience securing cloud environments and modern software delivery pipelines
• Deep understanding of data security and protection requirements: encryption, access control, backup and recovery, and data lifecycle management
• Proven ability to move from design to delivery. Should be comfortable building and configuring what you design
• Broad security knowledge across multiple domains, and a willingness to work and collaborate outside your specialty
• Ability to explain security decisions in plain language to non-security teams, and to influence teams you don't manage
• A pragmatic mindset: you balance risk, cost, and business needs rather than pursuing perfection
• Comfortable working independently and setting your own priorities within agreed goals
• Experience securing AI or machine learning systems
• Relevant certifications (for example CISSP, CCSP, or cloud provider security certifications)
• Experience in a regulated industry
• Experience mentoring or coaching less experienced security staff