Cribl Principal Product Security Engineer at Cribl leads product and cloud security across multiple teams. The role includes security reviews, threat modeling, and translating risk into engineering requirements.
Responsibilities
Set long-term product and cloud security direction across multiple teams, shaping roadmaps, standards, secure-by-default patterns, and risk-informed design and release decisions.
Lead Product Security Reviews for distributed, multi-tenant SaaS and customer-managed products, including architecture and design review, threat modeling, abuse-case analysis, targeted secure code review, and security test planning.
Translate risk into concrete engineering requirements, mitigations, tests, and secure defaults; stay engaged through implementation and independently verify that the intended risk reduction was achieved.
Serve as a principal cloud security authority across IAM and workload identity, organization and account boundaries, network exposure, KMS and encryption, secrets, logging and detection, containers and Kubernetes, serverless services, infrastructure as code, hardening, and data isolation.
Lead the Product Security component of FedRAMP engineering. Translate FedRAMP Moderate and NIST SP 800-53 control intent into sustainable technical controls and defensible evidence, and partner on authorization-boundary and significant-change decisions, continuous monitoring, vulnerability and change management, POA&M and deviation remediation, incident response, vendor assessments, and 3PAO or assessor interactions.
Investigate ambiguous signals and vulnerabilities from bug bounty, application and supply-chain scanners, penetration tests, cloud detections, and internal reports; determine exploitability, exposure, and impact; coordinate remediation; validate fixes and bypasses; and hunt for variants and root causes.
Evolve scalable, risk-adaptive vulnerability management using exposure, exploitability, CISA Known Exploited Vulnerabilities signals, asset criticality, customer impact, and regulatory timelines,not CVSS alone.
Build and operate durable security capabilities and developer paved roads across CI/CD, SAST, SCA, secrets, infrastructure as code, containers, cloud posture, and testing. Automate repeatable work while preserving explicit human judgment for consequential security decisions.
Scope and oversee external penetration tests, purple-team exercises, and relevant security vendors; ensure findings become owned, verified engineering outcomes; and provide evidence-based input to build, retain, replace, or retire decisions.
Lead multi-team work through uncertainty and high-stakes situations, making clear tradeoffs among security, reliability, delivery, customer impact, and compliance while acting with appropriate urgency.
Communicate complex risks, options, uncertainty, and recommendations in direct, audience-appropriate terms for engineers, senior leaders, customers, assessors, and external partners; represent Cribl credibly when needed.
Multiply the team by mentoring Product Security engineers, security champions, and engineering partners; create standards, runbooks, automation, and continuity plans that prevent critical capabilities from depending on one person.
Qualification
DeepA bachelor’s degree in computer sciencePreferred qualifications
Required
Experience securing AI or agentic systems and applying AI responsibly to security engineering workflows.
A Principal-level track record of setting technical direction across teams, leading multi-quarter initiatives, resolving ambiguous critical problems, and influencing senior Engineering and Product leaders without direct authority.
Deep, hands-on AWS and Azure security experience in production SaaS or cloud-native systems, including identity and authorization, network controls, encryption and key management, secrets, logging and detection, containers or Kubernetes, serverless services, infrastructure as code, and multi-tenant data isolation.
Direct experience implementing or operating product and cloud security controls in a FedRAMP-authorized or FedRAMP-bound environment. You understand NIST SP 800-53 control intent and have supported technical control implementation and evidence, continuous monitoring, vulnerability and change management, POA&M or deviation remediation, and assessor interactions.
Expertise leading security design reviews and threat models for complex applications, APIs, distributed systems, and cloud architectures, with the judgment to turn findings into practical countermeasures and risk-informed release recommendations.
Strong knowledge of web and application vulnerabilities, exploit techniques, OWASP guidance, authentication and authorization protocols, cryptography, common network protocols, and secure cloud operating models.
Ability to read production code and build maintainable automation in JavaScript or TypeScript, Python, Go, or a comparable language; willingness to work directly with Engineering to implement and verify security improvements.
Hands-on vulnerability-response experience, including exploitability analysis, root-cause and variant analysis, remediation design, fix and bypass validation, stakeholder coordination, and incident support.
Exceptional written and verbal communication, with the ability to make complex risk and tradeoffs clear to engineers, executives, customers, assessors, and external partners.
A bachelor’s degree in computer science, cybersecurity, or a related field—or equivalent practical experience.
Preferred qualifications
Experience securing enterprise data platforms, observability systems, high-volume data pipelines, agents, or customer-managed and hybrid software.
