Principal Security Engineer - Information Security

Ascensus provides savings-plan technology and services. The Principal Security Engineer designs and enhances enterprise security solutions, shapes security strategy, leads security initiatives, and mentors engineers while collaborating with security and IT teams.

Responsibilities:

• Security Architecture & Implementation: Design, implement, and optimize securitysolutions to protect enterprise assets, data, and systems
• Technology Guidance: Provide technical guidance in evaluating, selecting, and deploying security tools and frameworks
• Security Engineering & Automation: Develop and implement security automation and integration across security platforms using scripting languages (Python, PowerShell, Bash)
• Threat & Vulnerability Management: Work closely with the SOC and threat teams to identify, analyze, and remediate security risks
• Compliance & Governance: Ensure security solutions align with regulatory requirements
• Incident Response Support: Provide advanced security engineering support for security incidents and investigations, including root cause analysis and remediation strategies
• Security Program Ownership: Lead and contribute to large-scale security projects and initiatives, ensuring proper documentation, risk assessments, and successful implementation
• Research & Development: Stay ahead of emerging threats, security technologies, and industry trends to continuously enhance security posture
• Mentorship & Training: Mentor security engineers and provide knowledge sharing through documentation, training sessions, and hands-on guidance

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field
• 7+ years of experience in security engineering, cybersecurity operations, or security architecture roles
• Strong expertise in security technologies, including:
• Next Generation Firewalls (NGFW)
• Web Application Firewall (WAF)
• Endpoint Detection & Response (EDR)
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Data Loss Prevention (DLP)
• Single Sign-On (SSO) & Multi-Factor Authentication (MFA)
• Security Information & Event Management (SIEM)
• Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Secure

Access Service Edge (SASE)

• Privileged Access Management (PAM)
• Identity & Access Management (IAM)
• Network segmentation & Zero Trust architectures
• Deep knowledge of Networking, NGFW, WAF, macro segmentation, cloud security (AWS, Azure, GCP) and modern security frameworks (e.g., Zero Trust, MITRE ATT&CK, NIST CSF, ISO 27001)
• Proven experience with automation and scripting (Python, PowerShell, Bash) for security engineering and threat detection
• Strong experience in security architecture and solution design for enterprise environments
• Experience with performing risk assessments, threat modeling, and security controls validation
• Advanced knowledge of compliance
• Excellent problem-solving, analytical thinking, and communication skills, with the ability to translate security concepts for non-technical stakeholders
• Professional security certifications preferred: CISSP, OSCP, CISM, CEH, GSEC, or equivalent