SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 215,000 - 235,000 / annual
DriveWealth is a global B2B fintech platform democratizing access to financial markets through an API-based infrastructure. The company enables partners to offer seamless investing and trading experiences worldwide, supporting US equities, mutual funds, ETFs, fixed income, and options.
You will serve as a Principal Security Engineer reporting to the Head of Security Engineering, acting as a senior technical leader who designs, builds, and matures security capabilities across the brokerage platform and corporate environment. This is a hands-on role combining architectural judgment with strong implementation skills to deliver scalable security solutions.
Key responsibilities include:
**Security Architecture & Technical Leadership**
- Design reusable security patterns and automated guardrails across product and corporate systems
- Own complex initiatives from design through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements
- Mentor engineers, conduct design and code reviews, document architectures and runbooks, and influence technical decisions across Engineering and IT
**Product & Corporate Security**
- Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure while accounting for availability and trading latency
- Harden Windows and macOS endpoints, tune endpoint protection, and automate Okta and JumpCloud identity and device controls
- Embed threat modeling, API security, security testing, image signing, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows
- Automate code, dependency, container, and infrastructure scanning; partner with Engineering and IT to prioritize remediation and prevent recurring vulnerabilities
**Security Operations Engineering**
- Build, integrate, and maintain SIEM, SOAR, endpoint security, and vulnerability management services
- Engineer telemetry collection, normalization, and enrichment; develop and validate analytics queries, detections, and automated response playbooks
- Provide subject matter expertise in threat hunting and incidents; deliver containment automation and lead post-incident hardening
**Compliance & Data Protection**
- Translate compliance requirements (SEC Rule 17a-3 and 17a-4 recordkeeping, GDPR, etc.) into tested technical controls
- Automate evidence collection and support audits and regulatory examinations
- Build and maintain data discovery, classification, access control, encryption, retention, and secure deletion capabilities
**Requirements:**
- 10+ years of relevant security, software, or infrastructure engineering experience with a track record leading complex security initiatives from architecture through production operation
- Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access
- Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS
- Experience with Okta, JumpCloud, or comparable platforms (preferred)
- Strong software and automation skills in Python or comparable language; practical experience with Terraform, CI/CD, GitOps, and security as code
- Experience building and operating security platforms, telemetry pipelines, detections, and response automation
- Sound architectural judgment, strong troubleshooting skills, ability to prioritize risk, manage competing initiatives, influence cross-functional decisions, and mentor technical colleagues
- Experience in regulated financial services or another environment with demanding availability and audit requirements; familiarity with NIST CSF or SP 800-53 is required; brokerage, SEC/FINRA, and privacy compliance experience are preferred
- Bachelor's degree in a related field or equivalent practical experience; relevant security, AWS, Kubernetes, or GIAC certifications are a plus
