Principal Security Engineer at Drivewealth · LumiJobs

Responsibilities

DriveWealth LLC is seeking a highly motivated and experienced Principal Security Engineer to design, build, and mature security capabilities across our brokerage platform and corporate environment. Reporting to the Head of Security Engineering, you will serve as a senior technical leader, own complex engineering initiatives, and shape the architecture and implementation of controls that support the firm’s growth, protect client and consumer data, and meet or exceed regulatory obligations.
In this hands-on role, you will secure our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology. We are seeking an engineer who combines architectural judgment with strong implementation skills to deliver scalable security solutions through software and automation. You will also build and maintain the platforms and services used by Security Operations, provide security consulting to business leaders and other engineers, and partner with Engineering, IT, Risk, and Compliance within an innovative and entrepreneurial culture.
Security Architecture & Technical Leadership
Architecture Standards: Design and assist in the implementation of reusable security patterns and automated guardrails across product and corporate systems.
Engineering Delivery: Own complex initiatives from design and testing through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements.
Technical Leadership: Mentor engineers, conduct design and code reviews, and document architectures and runbooks. Influence technical decisions across Engineering and IT while balancing security, reliability, and delivery.
Product & Corporate Security
Cloud & Network Security: Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure, accounting for availability and trading latency.
Endpoint & Identity: Harden Windows and macOS, tune endpoint protection, and automate Okta and JumpCloud identity and device controls. Strengthen privileged access, phishing-resistant authentication, and secure configurations for Slack and other SaaS applications.
Application & Container Security: Embed threat modeling, API security, security testing, image
signing, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows.
Exposure Management: Automate code, dependency, container, and infrastructure scanning. Partner with Engineering and IT to prioritize remediation, verify fixes, and prevent recurring vulnerabilities.

Qualification

10+ years of relevant securityStrong working knowledge of endpointExperience with OktaSound architectural judgmentIf based in New York or ChicagoIf based in Austin

Required

10+ years of relevant security, software, or infrastructure engineering experience, with a track record leading complex security initiatives from architecture through production operation.
Deep practical expertise in AWS and Kubernetes security, including IAM, workload identity, networking, container protection, and secure data access.
Strong working knowledge of endpoint, identity, and SaaS security across Windows and macOS.
Experience with Okta, JumpCloud, or comparable platforms is preferred.
Strong software and automation skills in Python or a comparable language and practical experience with Terraform, CI/CD, GitOps, and security as code.
Experience building and operating security platforms, telemetry pipelines, detections, and response automation, with attention to data quality, reliability, and maintainability.
Sound architectural judgment, strong troubleshooting skills, and the ability to prioritize risk, manage competing initiatives, influence cross-functional decisions, and mentor technical colleagues.
Experience in regulated financial services or another environment with demanding availability and audit requirements. Familiarity with NIST CSF or SP 800-53 is required. Brokerage, SEC/FINRA, and privacy compliance experience are preferred.
Bachelor’s degree in a related field or equivalent practical experience. Relevant security, AWS, Kubernetes, or GIAC certifications are a plus.
This role is open to candidates in the following locations: New York City, Chicago, Austin, Dallas, Denver, Miami, San Francisco Bay Area, or Seattle.
If based in New York or Chicago: This role is expected to come into the office on a cadence set by the Hiring Manager/Team.
If based in Austin, Dallas, Denver, Miami, San Francisco, or Seattle: This is a fully remote role, though you may need to visit our onsite offices from time to time.

Principal Security Engineer

Responsibilities

Qualification

Required

Benefits

Company

Drivewealth

More roles at Drivewealth