SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Altruist is transforming wealth management by building an AI platform for financial advisors. The company partners with advisors nationwide to help them grow, optimize resources, and deliver superior client outcomes.
As Principal Security Engineer, you will define secure-by-design architecture across Altruist's cloud, applications, and identity platforms. You'll establish patterns and standards that enable the company to scale its self-clearing broker-dealer safely and securely.
Key responsibilities include:
- Own security architecture and reusable reference patterns across AWS, Kubernetes (EKS), and Java/Spring platforms
- Lead security design reviews and threat modeling for new products and services
- Define standards for encryption, key management, identity, zero trust, network segmentation, and service-to-service authentication/authorization
- Drive encryption strengthening programs and cloud guardrails
- Partner with Engineering, Cloud, and IT teams to embed security into the SDLC and infrastructure by default
- Advise on security architecture for strategic initiatives, integrations, and framework alignment
You bring 10+ years of security experience with significant time in security architecture or senior engineering roles. You have deep expertise securing AWS and Kubernetes at scale, strong application security and threat-modeling background, working knowledge of cryptography and key management, and experience defining zero-trust and identity architecture. You hold a B.A./B.S. in Computer Science, Computer Engineering, Information Security, or equivalent experience.
You are technically fluent across modern tech stacks (Java, Spring, Terraform, Kubernetes, AWS), demonstrate exceptional ownership and communication skills, and approach problems with creativity and resilience. Bonus experience includes work in regulated environments (SEC/FINRA, fintech, clearing/broker-dealer), cryptographic isolation or searchable encryption, and relevant certifications (CISSP, CCSP, SABSA).
The role follows a hybrid schedule with three days per week onsite in San Francisco FiDi or Culver City.
